trl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7}) 14:13:00 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004014) 14:13:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8}) 14:13:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10}) 14:13:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x21}) 14:13:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x300}) 14:13:00 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x500}) 14:13:01 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004015) 14:13:01 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x600}) 14:13:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x700}) 14:13:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x60ff}) 14:13:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xff00}) 14:13:02 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xf0ff1f}) 14:13:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:02 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004016) [ 427.281150][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 427.281170][ T38] audit: type=1804 audit(1638022382.293:666): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/398/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:13:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1000000}) [ 427.336558][ T38] audit: type=1804 audit(1638022382.353:667): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/419/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:13:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x2000000}) 14:13:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x3000000}) 14:13:02 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x4000000}) 14:13:02 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004017) [ 427.822463][ T38] audit: type=1804 audit(1638022382.833:668): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/399/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 427.878446][ T38] audit: type=1804 audit(1638022382.893:669): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/420/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 14:13:03 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x5000000}) 14:13:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x6000000}) 14:13:03 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7000000}) 14:13:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004018) [ 428.402353][ T38] audit: type=1804 audit(1638022383.413:670): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/400/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 428.440945][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8000000}) [ 428.550494][ T38] audit: type=1804 audit(1638022383.563:671): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/421/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 428.602390][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10000000}) 14:13:03 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1ffff000}) 14:13:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004019) 14:13:03 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000"], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x20000000}) [ 429.097643][ T38] audit: type=1804 audit(1638022384.113:672): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/422/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 429.149426][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x21000000}) [ 429.160299][ T38] audit: type=1804 audit(1638022384.123:673): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/401/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 429.197488][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xff000000}) 14:13:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xff600000}) 14:13:04 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xffffffff}) 14:13:04 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000"], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:04 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401a) 14:13:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 430.027734][ T38] audit: type=1804 audit(1638022385.043:674): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/423/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 430.068218][ C2] vkms_vblank_simulate: vblank timer overrun [ 430.082367][ T38] audit: type=1804 audit(1638022385.043:675): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/402/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 14:13:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}) [ 430.123369][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}) 14:13:05 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000"], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:05 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}) 14:13:05 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401b) 14:13:05 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}) 14:13:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}) 14:13:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}) 14:13:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}) 14:13:06 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}) 14:13:06 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401c) 14:13:06 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x21}) 14:13:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x300}) 14:13:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x500}) 14:13:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x600}) 14:13:07 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:07 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x700}) 14:13:07 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401d) 14:13:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60ff}) [ 432.836030][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 432.836049][ T38] audit: type=1804 audit(1638022387.853:681): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/426/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 432.898755][ T38] audit: type=1804 audit(1638022387.863:682): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/406/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:13:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff00}) 14:13:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf0ff1f}) 14:13:08 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 433.346093][ T38] audit: type=1804 audit(1638022388.363:683): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/407/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 14:13:08 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401e) 14:13:08 executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:08 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000}) 14:13:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}) [ 433.738239][ T38] audit: type=1804 audit(1638022388.753:684): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/408/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 433.779185][ C2] vkms_vblank_simulate: vblank timer overrun [ 433.790707][ T38] audit: type=1804 audit(1638022388.753:685): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/427/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 433.834087][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3000000}) 14:13:08 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000}) 14:13:09 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:09 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004021) [ 434.185150][ T38] audit: type=1804 audit(1638022389.203:686): pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/409/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 434.224280][ C2] vkms_vblank_simulate: vblank timer overrun [ 434.258778][ T38] audit: type=1804 audit(1638022389.273:687): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/428/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:13:09 executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5000000}) 14:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6000000}) 14:13:09 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004022) 14:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7000000}) 14:13:09 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000000}) [ 434.916534][ T38] audit: type=1804 audit(1638022389.933:688): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/429/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 14:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000}) [ 434.991178][ T38] audit: type=1804 audit(1638022390.003:689): pid=8670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/410/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 14:13:10 executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ffff000}) 14:13:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000}) 14:13:10 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004023) 14:13:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x21000000}) 14:13:10 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff000000}) [ 435.851733][ T38] audit: type=1804 audit(1638022390.863:690): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/411/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 14:13:10 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff600000}) 14:13:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}) 14:13:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:11 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004024) 14:13:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:11 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}) 14:13:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}) 14:13:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) 14:13:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}) 14:13:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:12 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004025) 14:13:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}) 14:13:12 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83050000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}) 14:13:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}) 14:13:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10}) 14:13:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21}) 14:13:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x300}) 14:13:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83050000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:13 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004026) 14:13:13 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 438.288104][ T38] kauditd_printk_skb: 5 callbacks suppressed 14:13:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x600}) [ 438.288123][ T38] audit: type=1804 audit(1638022393.303:696): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/433/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:13:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x700}) [ 438.386809][ T38] audit: type=1804 audit(1638022393.403:697): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/414/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 14:13:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x60ff}) 14:13:13 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004027) 14:13:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff00}) 14:13:13 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83050000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 438.814702][ T38] audit: type=1804 audit(1638022393.833:698): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/434/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 438.903645][ T38] audit: type=1804 audit(1638022393.913:699): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/415/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:13:14 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf0ff1f}) 14:13:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 14:13:14 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83050000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 14:13:14 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004028) 14:13:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 439.482767][ T38] audit: type=1804 audit(1638022394.493:700): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/416/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:13:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 439.632127][ T38] audit: type=1804 audit(1638022394.643:701): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/435/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 439.694704][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 14:13:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 14:13:15 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83050000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:15 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004029) 14:13:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 440.268925][ T38] audit: type=1804 audit(1638022395.283:702): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/436/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 440.316101][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 440.327664][ T38] audit: type=1804 audit(1638022395.293:703): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/417/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 [ 440.364768][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000000}) [ 440.888571][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ffff000}) 14:13:15 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83050000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:15 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402a) 14:13:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000}) [ 441.071091][ T38] audit: type=1804 audit(1638022396.083:704): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/418/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 441.107825][ C2] vkms_vblank_simulate: vblank timer overrun [ 441.119579][ T38] audit: type=1804 audit(1638022396.083:705): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/437/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 441.167996][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21000000}) 14:13:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 14:13:16 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402b) 14:13:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff600000}) 14:13:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:16 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff8305000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:16 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402c) 14:13:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 14:13:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x101, 0xad87, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x80, 0x4a4f, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x7fff, 0xad87, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)={r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x400, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6}, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000040)=0x30d) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x3, 0x0, 0x10001}) 14:13:17 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff8305000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0xaa1d, 0x12480) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x8010, r0, 0x5e2b0000) 14:13:17 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:17 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402d) 14:13:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x339200, 0x10) 14:13:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x202200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000140)={0x1000, 0x4, &(0x7f0000000040)=[0x0, 0xfffa, 0xe68, 0x7], &(0x7f0000000080)=[0x7, 0x3ff, 0x8], &(0x7f00000000c0)=[0x2, 0xa42d]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffffff01, 0x7, 0x67b1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 14:13:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendfile(r3, r4, &(0x7f0000000040)=0x2f, 0x3) dup2(r2, r0) 14:13:18 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff8305000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x3e, 0x10000, 0x1b}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xba, 0x3, 0xfff, 0x99, 0x1, 0x0, 0x9, 0x3ff, 0x8, 0x5, 0x8, 0x20000004, 0xa907, 0x8, 0x20], 0xf, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 14:13:18 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402e) 14:13:18 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:18 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 443.789601][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 443.789619][ T38] audit: type=1804 audit(1638022398.803:713): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/422/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 443.855605][ T38] audit: type=1804 audit(1638022398.873:714): pid=8877 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/441/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:13:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:19 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402f) [ 444.231737][ T38] audit: type=1804 audit(1638022399.243:715): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/423/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 444.307386][ T38] audit: type=1804 audit(1638022399.323:716): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/442/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 14:13:19 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:19 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:19 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004060) [ 444.910280][ T38] audit: type=1804 audit(1638022399.923:717): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/424/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 445.071780][ T38] audit: type=1804 audit(1638022400.083:718): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/443/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 14:13:20 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:20 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004064) [ 445.321163][ T38] audit: type=1804 audit(1638022400.333:719): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/425/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 445.372776][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:20 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 445.473009][ T38] audit: type=1804 audit(1638022400.483:720): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/444/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 445.517316][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:20 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 445.976796][ T38] audit: type=1804 audit(1638022400.993:721): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/426/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 14:13:21 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004082) 14:13:21 executing program 3: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 446.014571][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000d, 0x13, r0, 0x202d0000) [ 446.100360][ T38] audit: type=1400 audit(1638022401.113:722): avc: denied { map } for pid=8913 comm="syz-executor.3" path="/dev/dri/card1" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 14:13:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x3082) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x3d35, 0xffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80000001, 0x8, 0xffffffff}) 14:13:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000)) 14:13:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:21 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:21 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004087) 14:13:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0xfffffff8, 0x755}) 14:13:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 14:13:21 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:21 executing program 3: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x560501) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 14:13:22 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:22 executing program 3: syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x30, 0xffffffffffffffff, 0x8000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r0, r5, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x7f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:22 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000040a8) 14:13:22 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffa7}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 14:13:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[0x400, 0x4e, 0xfff, 0x5]}) 14:13:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x6, 0x3}) 14:13:22 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000040f1) 14:13:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x111280) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x101, 0xad87, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x7fff, 0xad87, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000002c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x101, 0xad87, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x7fff, 0xad87, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x240800, 0x98) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x5, 0x3, 0x2, 0x2}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) creat(&(0x7f0000000280)='./file1\x00', 0x118) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000001c0)={0x0, 0x22}) 14:13:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0xff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0xc338, 0x3}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 14:13:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 14:13:23 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000040f2) 14:13:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 448.870745][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 448.870762][ T38] audit: type=1804 audit(1638022403.883:733): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/449/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 449.064155][ T38] audit: type=1804 audit(1638022404.073:734): pid=8998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/431/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 14:13:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:24 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100015000) 14:13:24 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 449.870420][ T38] audit: type=1804 audit(1638022404.883:735): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/432/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 [ 449.949972][ T38] audit: type=1804 audit(1638022404.893:736): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/450/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 450.138923][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:25 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100019000) 14:13:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee04"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:25 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 450.400166][ T38] audit: type=1804 audit(1638022405.413:737): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/451/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 450.446114][ T38] audit: type=1804 audit(1638022405.453:738): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/433/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 14:13:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffff01, 0x4000) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x652}) 14:13:25 executing program 3: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x240080c0) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) 14:13:25 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10001d000) 14:13:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x6, 0x1, 0x4, 0x0, 0xc0}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x4410, r1, 0x6992000) 14:13:25 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 450.909385][ T38] audit: type=1804 audit(1638022405.923:739): pid=9032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/452/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 14:13:25 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0x0, "0df496b592e60a15602eb36e97823fd151fb008869985bf6537b4ecace2f18579193f9f33c914bd56e22d2da0d3e0d80014f8ff249a40d2952362dbcb6061bb767c87e05943e1fc201cb40b64708f7bb7e8ee9c7508a102c7724ebda30eede91bab46e7ce54ba52d42631857861d69d454000c6a9871e5a617d8560b9342538eb3805c359236a92b2ac29762c9f5857d9c111c2f0e54a6ba00c1147c501724d31969de319729935330ca27dd4f3c7ec1bdb2f52fdc8ac53682c1ae910077ca777258522870d591de3557bfedbfd80e34f503fb6c27359acd"}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x200880) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 450.991083][ T38] audit: type=1804 audit(1638022406.003:740): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/434/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:13:26 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee04"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x20a242) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000080)={0x2, 0x0, 0x1000, &(0x7f0000000280)=""/4096}) 14:13:26 executing program 3: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x11) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdab}) 14:13:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r3}}, 0x128) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0x5, 0xb9a6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:26 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1ffffefff) 14:13:26 executing program 3: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedf}) 14:13:26 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:26 executing program 3: socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 451.626126][ T38] audit: type=1804 audit(1638022406.643:741): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/453/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 451.685016][ T38] audit: type=1804 audit(1638022406.703:742): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/435/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:13:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0xe4, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 14:13:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee04"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:27 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x321206, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x1000}) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0xa800, 0x12) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000000c0)={0x3f, 0x9, 0xcb, 0x8001, 0x8c62, 0xc86, 0x7}) 14:13:27 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090da0000f6c4cb8b93e3333f14da675f", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) pread64(r2, &(0x7f0000000140)=""/191, 0xbf, 0x7) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x7f, 0x7}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000240)=0x1f) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) 14:13:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 14:13:27 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x12000) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x100000000001, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_open_dev$dri(&(0x7f0000000100), 0x4, 0x82081) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0x71c1, {0x7, 0x1, 0x0, 0x0, 0xd2, 0x7}}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x61}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @jmp={0x5, 0x1, 0x0, 0x7, 0x4, 0xffffffffffffffe0}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x9c, &(0x7f0000000240)=""/156, 0x40f00, 0x3, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x9, 0x7, 0x7}, 0x10}, 0x78) 14:13:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:27 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:27 executing program 3: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4c0080, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x5c, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2000808d) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x9ae6b52484628db3, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x814}, 0x4040) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x400000003, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES16=r4, @ANYBLOB="ff8305e39ba7c8f96621", @ANYRESHEX=r0], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x401, 0x7fff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0xb3, 0x6, 0x7fff, 0x7, 0x0, [0x4, 0x7, 0x2], [0x81, 0x1, 0x4a74, 0x4], [0x3, 0x1, 0x401, 0x8], [0x100000001, 0x6, 0xfffffffffffffff8, 0x800]}) 14:13:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x101, 0xad87, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x7fff, 0xad87, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000080)={0x4, 0x1, 0x101, 0x4, &(0x7f0000000040)=[{0x80, 0x8, 0x0, 0xfff}, {0x4, 0x7, 0x7f, 0x88c8}, {0x6, 0x3e, 0xde, 0x6}, {0x1f, 0x4, 0x1, 0x5}]}) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2002) 14:13:28 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xeffffffffffffffc, 0x10000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000040)={0x5, 0x8, 0x31, 0x1f, 0x0, [0x6d, 0x7, 0x40, 0xfffffff9], [0x3, 0xfffffffc, 0x401, 0x7], [0x932, 0x3, 0x7, 0x1], [0x10001, 0xfffffffffffffff7, 0x7, 0x5]}) 14:13:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/iscsi_transport', 0x2, 0x90) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0xfffff800, 0xfffffffb, 0x4, 0x2800000, 0x0, 0x5, 0x8, 0x7e23], 0x9, 0x80000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x11}) 14:13:28 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 14:13:28 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:28 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) sendfile(r1, r2, &(0x7f0000000080)=0xfffffffffffffeff, 0x80000000) [ 454.016385][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 454.016413][ T38] audit: type=1804 audit(1638022409.033:751): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/439/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 454.069947][ C2] vkms_vblank_simulate: vblank timer overrun [ 454.080341][ T38] audit: type=1804 audit(1638022409.033:752): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/456/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 454.117401][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) fcntl$setpipe(r1, 0x407, 0x7) 14:13:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00006d9000/0x1000)=nil, 0x1000, 0x6c6159ac6e5c3114, 0x20010, r3, 0x0) syz_io_uring_setup(0x1384, &(0x7f0000000080)={0x0, 0x71a6, 0x4, 0x3, 0x122}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d8000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r8 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r8, 0x0, 0x0, 0x9, 0xb, 0x0, {0x0, 0x0, r9}}, 0x5a26) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 454.319850][ T38] audit: type=1400 audit(1638022409.333:753): avc: denied { map } for pid=9137 comm="syz-executor.3" path="pipe:[49542]" dev="pipefs" ino=49542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 454.363569][ C2] vkms_vblank_simulate: vblank timer overrun [ 454.379888][ T38] audit: type=1400 audit(1638022409.343:754): avc: denied { execute } for pid=9137 comm="syz-executor.3" path="pipe:[49542]" dev="pipefs" ino=49542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 14:13:29 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1801, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xf8c}, 0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_submit(r1, 0x3, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x250, r2, &(0x7f0000000240)="24442a658eac597a8a4334e2e5d7d134de39eb573b654101ad8f107e440683ac316746c475eb5a01c00a31f6b64781fda48f2b186f00a16a0c30bf6e8570421c0091a6a58d86daff416ae4547a352277aeedee941c6c78f515e4f642d9f53f502107bb471add75c7e67289e48023d7445f4f691c4ea53c0e482f025e6a94272517addf9320ab1f44ae4da16ba1476bbc77fbdeb41995377d484cbfef5513c58d798bcada39c4a6d2a84181a5f2952817875493fbecac8f62fd570097e1dca8f0752547fa1f847596fc75b212", 0xcc, 0xa7d, 0x0, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffffffffffffffff, &(0x7f0000000080)="5ebffd4e2359cdbf1f1c1af0bee0969c7865ace7276df19b4ed50c16cc539f77b6de66258eca03dbab291b3f26ceed67624dca55be6be1e7b575bbeea4e9865b5a78e5c1de07", 0x46, 0x6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x2, r3, &(0x7f00000001c0)="83d309f426471fcae885e7dca1a34164df4594", 0x13, 0x1d3, 0x0, 0x3}]) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 454.532559][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:29 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x10301, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100004000) 14:13:29 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100004000) 14:13:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={0x5, 0x0, 0x7, 0x6, 0x0, [0x4, 0x21, 0x81, 0x200], [0x8, 0x23, 0xfffffffa, 0xc36], [0x7, 0x9, 0x6, 0x7], [0x5, 0xfffffffffffffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0xfffffff7, 0xe77]) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000040)=[0x5, 0x20000, 0x7fffffff, 0xfffff801, 0x2, 0xfffff9de], &(0x7f0000000080)=[0x5, 0x8, 0x4, 0xfffffff8], 0x0, 0x5, 0x6, &(0x7f00000000c0)=[0xdd, 0x5, 0x401, 0x20, 0x7], &(0x7f0000000140)=[0x5, 0xca0, 0x3, 0xa89a]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ppoll(&(0x7f0000000300)=[{r1, 0x80}, {0xffffffffffffffff, 0x8200}, {r2, 0x420}, {r0, 0x1240}, {r3, 0x4800}, {r4, 0x2200}, {r5, 0x2084}, {r0, 0x200}], 0x8, &(0x7f0000000340), &(0x7f0000000380)={[0x7fffffff]}, 0x8) 14:13:29 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="c6040000", @ANYRES16=r2, @ANYBLOB="8c3f27ff830500490000", @ANYRES32=r3], 0x4}}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x22002, 0x0) sendfile(r4, r1, 0x0, 0x40) [ 454.918161][ T38] audit: type=1804 audit(1638022409.933:755): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/440/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 14:13:29 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100004000) 14:13:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x35576517, 0x10000, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x8000000, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRESHEX=r0, @ANYBLOB="0400f0ff005b716762bda87670493d0000f24a08af08ce75f079926be2e0072cfdec7f41529a92b45f3de8696c6530008df3dbd8f85914c99803a98025d748d0214ed869e4e59594cacd227a144308aaf583f4efe3bcf582028fa9e0393735f5dcc8a123aed207cd69b1ee6501749ca3d9b61891ffb94342f944030aed628740557fac2b8f3188b7ba8c64d9484a4cd66d75d135905ab3d9a2f975eeb35969997ba689ba102060a607b0f90f3c90c374d8fee0f104f8ee0821c3f4ff8b9be65529f3356d59acb6c72817489fef86b4c27222df88f0ad14f8", @ANYRESDEC=r3, @ANYRESDEC=r1]) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000040)={0x6bc, 0x5, 0x80000001, 0x4, 0x1}) [ 454.996073][ T38] audit: type=1804 audit(1638022410.013:756): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/458/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 455.037027][ T38] audit: type=1400 audit(1638022410.013:757): avc: denied { read write } for pid=9152 comm="syz-executor.2" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 14:13:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) [ 455.084251][ T38] audit: type=1400 audit(1638022410.013:758): avc: denied { open } for pid=9152 comm="syz-executor.2" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 14:13:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2000000000008001, 0x44540) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 455.168260][ T38] audit: type=1804 audit(1638022410.183:759): pid=9168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/441/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:13:30 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="296581177d47581d2b24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 455.251529][ T38] audit: type=1400 audit(1638022410.263:760): avc: denied { append } for pid=9169 comm="syz-executor.3" name="card1" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 14:13:30 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04de"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:30 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100004000) 14:13:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1c}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000040)=0x1) openat(r3, &(0x7f0000000000)='./file0\x00', 0x8800, 0xc0) 14:13:30 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) syz_open_pts(r4, 0x101840) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRESOCT, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x10008045) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x252040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x10}) 14:13:30 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100004000) 14:13:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd19}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) close(r0) 14:13:31 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:31 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04de"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:31 executing program 3: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x894) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 14:13:31 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100004000) 14:13:31 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:31 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100004000) 14:13:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = epoll_create(0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 14:13:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x3, 0x6, 0x4, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x4, 0x0, 0x42}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x5, 0x85f3f28}) 14:13:32 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04de"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:32 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 14:13:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendfile(r4, r5, &(0x7f0000000000)=0x8000, 0x8) r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r6, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x67d, &(0x7f0000000140)={0x0, 0x4fdb, 0x8, 0x1, 0x3a9, 0x0, r6}, &(0x7f00006d7000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 14:13:32 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="4ac900"/18, @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:32 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 14:13:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000000)={0x6, 0x4, 0x22200, 0x4, 0x6, [0xcb49, 0x401, 0xfff, 0x3], [0x4, 0xa4, 0x0, 0x4], [0x0, 0xffff1be6, 0x5b, 0x200000], [0x2, 0x6, 0x6, 0x2]}) 14:13:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x81, 0x4100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x6bd0) 14:13:33 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 14:13:33 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000240)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000080)={r2, 0xe5, &(0x7f0000001240)=""/229}) 14:13:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:33 executing program 3: ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10200, 0x0, &(0x7f00006d6000/0x4000)=nil}) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 14:13:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendfile(r4, r5, &(0x7f0000000000)=0x8000, 0x8) r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r6, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x67d, &(0x7f0000000140)={0x0, 0x4fdb, 0x8, 0x1, 0x3a9, 0x0, r6}, &(0x7f00006d7000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 14:13:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee04"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000100)) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:34 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 459.446021][ T38] kauditd_printk_skb: 12 callbacks suppressed [ 459.446041][ T38] audit: type=1804 audit(1638022414.463:773): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/465/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:13:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300f786e3f41ce30dacf4d39e001c9a0a8c19b264ffa94b39651d831986fcd52983a91044cd8ca714473eb5", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 459.864698][ T38] audit: type=1804 audit(1638022414.883:774): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/466/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 460.018849][ T38] audit: type=1804 audit(1638022415.033:775): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/451/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:13:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:35 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:35 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1}, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000400", @ANYRES32=r2, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendfile(r4, r3, 0x0, 0x100004000) [ 460.582831][ T38] audit: type=1804 audit(1638022415.593:776): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/452/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 14:13:35 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:35 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24930c58ec010002f36538202400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x62c6192, 0x7}) r1 = memfd_secret(0x80000) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x1, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdb}) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x2, 0x8000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000180)={0x4}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) [ 461.011732][ T38] audit: type=1804 audit(1638022416.023:777): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/468/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 461.065684][ T38] audit: type=1804 audit(1638022416.033:778): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/453/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:13:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x400001, 0x400000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2}) 14:13:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r5, 0x80000001}, &(0x7f00000000c0)=0x8) [ 461.331811][ T38] audit: type=1400 audit(1638022416.343:779): avc: denied { name_bind } for pid=9307 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 14:13:36 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004028) 14:13:36 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="8ee5df19433245ddf70994eb44c7b416b18b65bff72fc5dd7fab95f5eb9c5f8752babafd6bd2d255f7127a11b14a15490ef84f2d80ab2ce3bdfc4eb726f71d60ad410b8062eff0be289ed6f530591f8df7a143d7b4b321c76404cdb643a405b0feda7193ece31bde97521dce2c46baf7edfc5e929ab7caa4bbb5", @ANYBLOB="ec0e1ae2aa04445171f2460e144adabb50d1221e0fa0cbebf0776dcf94a4a967827e0a2f4013ef7ca0b705d0bb64ba7c38507e8327296ad4e731f9e21b75b8c34b05f1ba2d8dad0eafbd2df9b8660c499078d6304a601bfa6d62419aeb800e5f27d4a8ff1dcd55a27c26cbb0e4c7f9cc8626d57df3ed7e0c121cf1980f459238d063e1c967bb15dea713a1a230db6d3161b2eb1a2d37ed517d21501410a5b5e114f63f48556e401e2566285e0b9a72eac2b0e76f", @ANYRES16, @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000000000000000000003b3ebcb2254fca202bedf831aead649534a95d7ef8aa31e3ab2f05241966caec5925e1d3630d6f8d3a3039a1e491bafe9706efbf55e3c196daa183b67dd01a91c67a5d83a211441a7db0767af2809bf752a1fc535937c09d38cb391fb5b5d2863d9b3a8afefada5312988886913a44e17b", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000000000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100004000) 14:13:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x319}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000080)={0x12}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x0, 0x6f8}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xfffffff9}}, './file0\x00'}) dup2(r6, r1) [ 461.667800][ T38] audit: type=1804 audit(1638022416.683:780): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/469/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 461.703318][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x3, 0xbe1, 0x80000000, 0x81, 0x9, 0x7, 0x2}) [ 461.805769][ T38] audit: type=1804 audit(1638022416.823:781): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/454/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:13:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffca1}) 14:13:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x2a00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:37 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004025) 14:13:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24200400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0xa0000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:37 executing program 3: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x101200) [ 462.375585][ T38] audit: type=1804 audit(1638022417.393:782): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/470/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:13:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000500)={{'\x00', 0x1}, {0x8}, 0xcd, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="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", 0x14b, 0x0, &(0x7f0000000300)={0x2, 0xea, {0x0, 0xc, 0xb8, "e14736cb0b1ad485aee287e2098e089c1e1c4e6e1388b9e718344a4a7d0f26ff3c4e271ad235ba4273bd304eb4b9abebefda58260aa12bb444608b5ffe8b4f73378733d859787c9997382fca4712e790c908d1b279cefaeeba87016ccc6144a93275f3c39b0959e97e1bccf8cd803f88ca48307d9f16ade895f9dcf2e77be319185605e450093be96141799758702d27834bba9b33b572705c7670f8efa7ae32b595bef5ce6085d5d333f2137e0c2aed3d00c5d7917847f8", 0x25, "90a2caf4e8b036eeff923fea7a37e2e6717899d371ebdc158db4bd6407bc636e22cc167c08"}, 0xd4, "75724747106dcc6237204f1be2eaa97bdb59452d74fefece86003952276ebf17aad7705e26f23d431caf600ff3297b6594c9d435ebce07e12a52d428337b432e9ac2a4645d13eb585cf11fd085ee1ee68943195b3d2e54c6e27ea60604bb1a1745af9cc92406948d1a929aca14317dca0114be541da3c3ac57400f8294cd2d3c4b486bef953a47e11c7445e7f2929021505cdbb01f5f0d92a6721c2847ba7d52af90966dc3694d0ae37971319930988ffb306392d23514b71832db6358d4c5e95cf3cb083236ad4849f56b87d6c5b401ad98241f"}, 0x1ca}) 14:13:37 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:38 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:38 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x80, 0x6, 0x6, 0x3ff, 0x3, "1e4a7cabb84996571f00f5fff7dc0f6fbd3e7c", 0x80000001, 0x9}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:38 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004019) 14:13:38 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES64=r6], 0x24}}, 0x4840) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES16=r4, @ANYBLOB="b919ace4915f91bd508c", @ANYRESHEX], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1ffff000}) 14:13:39 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240004", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:39 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 464.752686][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 464.752705][ T38] audit: type=1804 audit(1638022419.763:791): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir960558697/syzkaller.V8gLxe/459/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 14:13:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000000)={0x0, 0x2}) [ 464.825008][ T38] audit: type=1804 audit(1638022419.843:792): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/474/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:13:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x7}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x40, 0x20000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000080)=[0x151f897a], 0x1, 0x2, 0x45c, 0xfffff801, 0xfffffffa, 0x8d, 0x200, {0x80000001, 0x9, 0x0, 0x7, 0x101, 0x8, 0x4, 0x0, 0x80, 0x9, 0x5, 0x4, 0x4, 0x8000, "598f65f6dd4f24235d8ee41b7a10f981523bf5d9ff304925b7f5ce0dddf11bac"}}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x189200, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}) 14:13:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x2a4880) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x40, 0x101, 0xeb, 0x4, 0x1911], 0x5, 0x7ff, 0x1, 0x1, 0xffffffc6, 0x9, 0x4, {0x4, 0x6, 0x822e, 0x0, 0x7, 0x0, 0xbc4d, 0x2, 0x7, 0x4, 0x366b, 0x200, 0xb8f, 0x7, "574c5c6bbc02504d379781f2708d6481fcd4cf632ef5967a041588851c0ddf73"}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1f], 0x1, 0x80800, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0xdbe, 0x3ff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendfile(r2, r0, 0x0, 0x9) 14:13:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:40 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x305801, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) getsockname$tipc(r1, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090b7c9e600000000f32d5dfba17615af", @ANYRES32], 0x24}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="86bee12f37db8e36f66c41705a33d6802444968f8c3921c6c30ae5d7039031f6ab26464f50f5464c0751e691b210c93cd30646af5f487b586b09fd050029c0c7a8929910c451ffba96a359fd5e4238c7e716b701816401b5120de6172a518f54696c5ece808403e24090af688b26ef092c353e66df236ac1650fc9b55092feea8d1a1b7c4330b4888bd8891a171eee2d7f311f4131ae028689a7a56672f226135b27262c839f907a062e6ba9ef4a5dcf3d188dc117800baa3c8742f0f77bf55348f3c2379179b2b3e226270f71bb0ea7feb6f9e1c440c94b1577f0df7ed3a3190f2eab62d8f711b6079539be2b8b74ebb9fd89ffa2f0075028636e3172c752598bf795c5305936ba192d89781e1dfb19c56388fad48bd8b8e2ff865ea3870a36301158fda47e38590a4ad5abf7eacc00328f22ca8171aa863cbafeb414c5352a8de1ae66eded5c722585013575a6fd0620605f179a617e59bd56a8af5fcc8f7a8b3d74d2aa45ca6ff56f9716296485c0cc7fec01", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x80, 0x10002) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x8e, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/320, 0x140, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/32, 0x20, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000500100000000000080000000000002000000000000000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc00"/256, 0x100, 0x10320}, {&(0x7f0000010400)="00000000000000000000000040d2010000000005000000000000000040500100000000050000000000000000c0d1010000000005000000000000000000d0010000000004000000000000000000d2010000000005000000000000000000d10100000000040000000000000000000008000000000000020000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0d2010000000006000000000000000040500100000000050000000000000000c0d0010000000006000000000000000080d2010000000006000000000000000000d3010000000006000000000000000080d0010000000006000000000000000000000800000000003002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d301000000000700000000000000004050010000000005000000000000000080d3010000000007000000000000000080d2010000000006000000000000000000d3010000000006000000000000000080d0010000000006000000000000000000000800000000003002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d001000000000400000000000000000050010000000004000000000000000080d0010000000004000000000000000000d00100000000040000000000000000c0d0010000000004000000000000000000d101000000000400000000000000000000080000000000000200000000000100"/640, 0x280, 0x10b20}, {&(0x7f0000010700)="364b90b71294d944000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000001000000000000100000000000001bfadffc0896b4f889c9b098a6c213e590300000000000000030000000000000004000000000100000000000000d80100000000000000393f0000620000000001000000000000e40000100000000000e93e0000500000000001000000000000e40000500000000000993e0000500000000001000000000000e40000d00000000000493e00005000"/224, 0xe0, 0x100000}, {&(0x7f0000010800)="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"/768, 0x300, 0x103ea0}, {&(0x7f0000010b00)="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"/320, 0x140, 0x107f60}, {&(0x7f0000010d00)="0000000000000000000000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000006c7ed2bf85974c6295dd17018ed3d3dc0100000000000000000000080000000000004000000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000006c7ed2bf85974c6295dd17018ed3d3dccdbfac4fc9184e3f9b627be6b63688a01a9ae0d8dbec7892000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000c01000000000000000000000000001bfadffc0896b4f889c9b098a6c213e590100000000000000040000000000000001000000000100000000000000cc00001000000000006b3f0000300000000000", 0x140, 0x10bf40}, {&(0x7f0000010f00)="000000000000000000000000000000000300000000000000000100000000000000001000000000000000400000000000bfadffc0896b4f889c9b098a6c213e590ffc39ec27b99d25000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000001100000000000000000000000001bfadffc0896b4f889c9b098a6c213e5901000000000000000500000000000000", 0xa0, 0x10ffc0}, {&(0x7f0000011000)="a03786e066b07dff000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000401100000000000000000000000001bfadffc0896b4f889c9b098a6c213e5901000000000000000700000000000000", 0x60, 0x114000}, {&(0x7f0000011100)="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", 0x1c0, 0x118000}, {&(0x7f0000011300)="00000000000000000000000000000000000000000000000000000000004000000000000000010000000000000400000000000000010000000000000002000000000000000200000000000000b00100000000000000010000000000000002000000000000000200000000000000b00300000000000000010000000000000002000000000000000200000000000000b00400000000000000010000000000000002000000000000000200000000000000b002000000000000000100000000000000010000000000000002000000000000000100000000000000010000000000000002000000000000000040010000000000000100000000000002000000000000000167bfc610f61d44000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000c01100000000000100000000000001bfadffc0896b4f889c9b098a6c213e590200000000000000040000000000000002000000000100000000000000cc00001000000000006b3f0000300000000100000000000000cc00005000000000003b3f00003000"/416, 0x1a0, 0x11bf00}, {&(0x7f0000011500)="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"/288, 0x120, 0x11ffa0}, {&(0x7f0000011700)="80000000000002000000000000000000010000000000040000000000000000000100000001000010000001000100010000000000000000005000000000006c7ed2bf85974c6295dd17018ed3d3dc000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000006c7ed2bf85974c6295dd17018ed3d3dc010000000000000000000008000000000000c000000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000006c7ed2bf85974c6295dd17018ed3d3dccdbfac4fc9184e3f9b627be6b63688a0", 0x100, 0x123f00}, {&(0x7f0000011800)="d4197004af3418a5000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000005000000000000100000000000001bfadffc0896b4f889c9b098a6c213e590200000000000000010000000000000004000000000200000000000000840000000000000000e43d0000b701000004000000000000008400000000000000002d3c0000b70100000500000000000000840000000000000000763a0000b70100000700000000000000840000000000000000bf380000b70100"/224, 0xe0, 0x500000}, {&(0x7f0000011900)="0000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41000000000000", 0x40, 0x503920}, {&(0x7f0000011a00)="00000000010000000000000000000000000000000040110000000000000000000000000000400000000000000000000000000000000000000000000001000000", 0x40, 0x5039c0}, {&(0x7f0000011b00)="00000000000000000000000000000000000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x503ac0}, {&(0x7f0000011c00)="0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000001100000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000007d5aba496ab34ae2be829bc48fe9049c00"/160, 0xa0, 0x503b60}, {&(0x7f0000011d00)="000053bc645f000000000000000053bc645f00"/32, 0x20, 0x503c20}, {&(0x7f0000011e00)="00000000000000000000000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x503c80}, {&(0x7f0000011f00)="0000000000000000000000000000000000000200000000000000000000000000000000c0110000000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000200"/128, 0x80, 0x503d20}, {&(0x7f0000012000)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x503e40}, {&(0x7f0000012100)="000000000000000000020000000000000000000000000000000080110000000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000200000000000000", 0x60, 0x503ee0}, {&(0x7f0000012200)="bf6e65102286a1f8000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000405000000000000100000000000001bfadffc0896b4f889c9b098a6c213e590300000000000000040000000000000003000000000100000000000000cc00001000000000006b3f0000300000000100000000000000cc00005000000000003b3f0000300000000100000000000000cc0000d000000000000b3f00003000"/192, 0xc0, 0x504000}, {&(0x7f0000012300)="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", 0x260, 0x507f60}, {&(0x7f0000012600)="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"/608, 0x260, 0x50bee0}, {&(0x7f0000012900)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x50f840}, {&(0x7f0000012a00)="00000100000000000000000000000000000000401100000000000000000000000000004000000000000000000000000000000000000000000000010000000000", 0x40, 0x50f8e0}, {&(0x7f0000012b00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41", 0x120, 0x50f9e0}, {&(0x7f0000012d00)="000000000000000000000300000000000000000100000000000000005100000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000003000000000000007d5aba496ab34ae2be829bc48fe9049c00"/128, 0x80, 0x50fb60}, {&(0x7f0000012e00)="000000000000000000000000000000000053bc645f000000000000000053bc645f00"/64, 0x40, 0x50fc00}, {&(0x7f0000012f00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x50fc80}, {&(0x7f0000013000)="000000000000000000000000000000000000030000000000000000000000000000000040500000000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000300"/128, 0x80, 0x50fd20}, {&(0x7f0000013100)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x50fe40}, {&(0x7f0000013200)="000000000000000000030000000000000000000000000000000080500000000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000300000000000000", 0x60, 0x50fee0}, {&(0x7f0000013300)="c220ad2a454567de000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000005100000000000100000000000001bfadffc0896b4f889c9b098a6c213e590300000000000000050000000000000002000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c00"/160, 0xa0, 0x510000}, {&(0x7f0000013400)="0000000000000000000000000000000000000000000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f0000000000000000", 0xc0, 0x513f40}, {&(0x7f0000013500)="8da3964014254720000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000005001000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000030000000000000006000000000100000000000000d80100000000000000393f0000620000000001000000000000e40000100000000000e93e0000500000000001000000000000e40000500000000000993e0000500000000001000000000000e40000d00000000000493e0000500000000001000000000000e40000500100000000d93d0000700000000001000000000000e40000d00100000000693d0000700000000000000000", 0x100, 0x1500000}, {&(0x7f0000013600)="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", 0x340, 0x1503dc0}, {&(0x7f0000013a00)="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", 0x240, 0x1507dc0}, {&(0x7f0000013d00)="8da3964014254720000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000005001000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000030000000000000006000000000100000000000000d80100000000000000393f0000620000000001000000000000e40000100000000000e93e0000500000000001000000000000e40000500000000000993e0000500000000001000000000000e40000d00000000000493e0000500000000001000000000000e40000500100000000d93d0000700000000001000000000000e40000d00100000000693d0000700000000000000000", 0x100, 0x1d00000}, {&(0x7f0000013e00)="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", 0x340, 0x1d03dc0}, {&(0x7f0000014200)="0000000000000000000000000000000000020000000002000000000000000000010000000000240000000000000000000100000001000010000002000100010000000000000000005002000000006c7ed2bf85974c6295dd17018ed3d3dc000000020000000002000000000000000000010000000000240000000000000000000100000001000010000002000100010000000000000000005002000000006c7ed2bf85974c6295dd17018ed3d3dc000000020000000002000000000000000000010000000000240000000000000000000100000001000010000002000100010000000000000000005002000000006c7ed2bf85974c6295dd17018ed3d3dc010000000000000000005004000000006c7ed2bf85974c6295dd17018ed3d3dc000080000000000002000000000000000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc00008000000000000200000000000000000001000000000001000000000000000000010000000100001000000100010001000000000000000000d000000000006c7ed2bf85974c6295dd17018ed3d3dc0100000000000000000000080000000000008005000000000010000000100000001000000000000000000000000000000000000000000000000000000000000000006c7ed2bf85974c6295dd17018ed3d3dccdbfac4fc9184e3f9b627be6b63688a0", 0x240, 0x1d07dc0}, {&(0x7f0000014500)="15f7deadf16827db000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d001000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000050000000000000002000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c00"/160, 0xa0, 0x2500000}, {&(0x7f0000014600)="0000000000000000000000000000000000000000000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000077f025abd39f6b17000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00040d001000000000100000000000001bfadffc0896b4f889c9b098a6c213e59060000000000000005000000000000001c000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c0000000001000000000000544bae790400000000cc3e0000230000000001000000000000546b826b1100000000a53e000027000000000100000000000054bf5d291700000000823e000023000000000100000000000054bcde42e5000000005f3e000023000000000100000000000054482d12f6000000003c3e00002300000001010000000000000100000000000000009c3d0000a000000001010000000000000c00010000000000008d3d00000f0000000101000000000000544bae7904000000006a3d000023000000010100000000000054482d12f600000000473d0000230000000201000000000000010000000000000000a73c0000a000000002010000000000000c0101000000000000983c00000f00000002010000000000006c0000000000000000693800002f0400000301000000000000010000000000000000c9370000a000000003010000000000000c0101000000000000ba3700000f00000003010000000000006c00000000000000007f3700003b0000000401000000000000010000000000000000df360000a000000004010000000000000c0001000000000000d03600000f00000004010000000000001822a8f12600000000a13600002f000000040100000000000018d65ba13500000000723600002f00000004010000000000006c0000000000000000533600001f0000000501000000000000010000000000000000b3350000a000000005010000000000000c0001000000000000953500001e00000005010000000000006c000000000000000060350000350000000601000000000000010000000000000000c0340000a000000006010000000000000c0001000000000000ad3400001300000006010000000000006c000000000000000034340000790000", 0x3e0, 0x2503f40}, {&(0x7f0000014a00)="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", 0xc00, 0x2507480}, {&(0x7f0000015600)="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"/448, 0x1c0, 0x250bfe0}, {&(0x7f0000015800)="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", 0x200, 0x250fe60}, {&(0x7f0000015a00)="dd81759fbd802e6d000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00040d101000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c00"/160, 0xa0, 0x2514000}, {&(0x7f0000015b00)="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", 0x140, 0x2517f40}, {&(0x7f0000015d00)="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", 0x1e0, 0x251bfe0}, {&(0x7f0000001080)="010000000000000004000000000000000200000000000000010000000000000004000000000000000200000000000000010000000000000005000000000000000200000000000000b00100000000000000010000000000000005000000000000000200000000000000b00400000000000000010000000000000005000000000000000200000000000000b00200000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000004000000000000000200000000000000b0070000000000000000c001000000000000010000000000002400000000000000010000000000000004000000000000000200000000000000b00500000000000000010000000000000005000000000000000200000000000000b00300000000000000004000000000000000010000000000002200000000000000000000000000000000010000000000000100000000000000a318b9abc25fd7cf000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d201000000000100000000000001bfadffc0896b4f889c9b098a6c213e590500000000000000040000000000000005000000000100000000000000cc0000d000000000006b3f0000300000000100000000000000cc00005001000000003b3f0000300000000100000000000000cc0000d001000000000b3f0000300000000100000000000000cc0000500200000000db3e0000300000000100000000000000cc0000500400000000ab3e0000300000000100000000000000cc0000500400000000ab3e0000300000000100000000000000cc00005004000000007b3e00003000"/672, 0x2a0, 0x251fe80}, {&(0x7f0000016200)="00000000000000000000000000000000030000000000000000010000000000000000d001000000000000000200000000bfadffc0896b4f889c9b098a6c213e59030000000000000000010000000000000000d001000000000000000200000000bfadffc0896b4f889c9b098a6c213e59030000000000000000010000000000000000d001000000000000000200000000bfadffc0896b4f889c9b098a6c213e59030000000000000000010000000000000000d001000000000000000200000000bfadffc0896b4f889c9b098a6c213e590300000000000000000100000000000000005001000000000000800000000000bfadffc0896b4f889c9b098a6c213e590300000000000000000100000000000000005001000000000000800000000000bfadffc0896b4f889c9b098a6c213e59030000000000000000010000000000000000d000000000000000800000000000bfadffc0896b4f889c9b098a6c213e5963a6bff78696a599000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00040d201000000000100000000000001bfadffc0896b4f889c9b098a6c213e59050000000000000001000000000000000a000000000200000000000000840000000000000000e43d0000b701000004000000000000008400000000000000002d3c0000b701000005000000000000000c06000000000000001c3c0000110000000500000000000000840000000000000000653a0000b70100000600000000000000010000000000000000c5390000a000000006000000000000000c0600000000000000b93900000c000000060000000000000054d2c2bf8d0000000094390000250000000700000000000000840000000000000000dd370000b7010000090000000000000084000000000000000026360000b7010000f7ffffffffffffff8400000000000000006f340000b701000000", 0x2c0, 0x2523ea0}, {&(0x7f0000016500)="0000000000000000000000000000000000000000040000000000000000010000000000000040d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x2527560}, {&(0x7f0000016600)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x2527720}, {&(0x7f0000016700)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x2527840}, {&(0x7f0000016800)="0000040000000000000000000000000000000000d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/96, 0x60, 0x25278e0}, {&(0x7f0000016900)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41", 0x120, 0x25279e0}, {&(0x7f0000016b00)="00000000000000000000040000000000000000010000000000000000d001000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000000000007d5aba496ab34ae2be829bc48fe9049c00"/128, 0x80, 0x2527b60}, {&(0x7f0000016c00)="000000000000000000000000000000000053bc645f000000000000000053bc645f00"/64, 0x40, 0x2527c00}, {&(0x7f0000016d00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x2527c80}, {&(0x7f0000016e00)="000000000000000000000000000000000000050000000000000000000000000000000000d20100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000500"/128, 0x80, 0x2527d20}, {&(0x7f0000016f00)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x2527e40}, {&(0x7f0000017000)="0000000000000000000500000000000000000000000000000000c0d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000500000000000000", 0x60, 0x2527ee0}, {&(0x7f0000017100)="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"/992, 0x3e0, 0x2528000}, {&(0x7f0000017500)="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", 0xdc0, 0x252b3a0}, {&(0x7f0000018300)="0000000000000000000000000000000000000000040000000000000000010000000000000040d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x252f560}, {&(0x7f0000018400)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x252f720}, {&(0x7f0000018500)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x252f840}, {&(0x7f0000018600)="0000060000000000000000000000000000000080d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x252f8e0}, {&(0x7f0000018700)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff00"/320, 0x140, 0x252f9e0}, {&(0x7f0000018900)="00000000000000000000060000000000000000010000000000000080d201000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000006000000000000007d5aba496ab34ae2be829bc48fe9049c0000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000054bc645f00000000d58f461b53bc645f00"/224, 0xe0, 0x252fb60}, {&(0x7f0000018a00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x252fc80}, {&(0x7f0000018b00)="000000000000000000000000000000000000060000000000000000000000000000000000d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x252fd20}, {&(0x7f0000018c00)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x252fe40}, {&(0x7f0000018d00)="0000000000000000000600000000000000000000000000000000c0d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600000000000000", 0x60, 0x252fee0}, {&(0x7f0000018e00)="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", 0x100, 0x2530000}, {&(0x7f0000018f00)="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", 0x280, 0x2533ee0}, {&(0x7f0000019200)="0000000000000000000000000000000000000000040000000000000000010000000000000040d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x2537560}, {&(0x7f0000019300)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x2537720}, {&(0x7f0000019400)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x2537840}, {&(0x7f0000019500)="0000060000000000000000000000000000000080d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x25378e0}, {&(0x7f0000019600)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff00"/320, 0x140, 0x25379e0}, {&(0x7f0000019800)="00000000000000000000060000000000000000010000000000000080d201000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000006000000000000007d5aba496ab34ae2be829bc48fe9049c0000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000054bc645f00000000d58f461b53bc645f00"/224, 0xe0, 0x2537b60}, {&(0x7f0000019900)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x2537c80}, {&(0x7f0000019a00)="000000000000000000000000000000000000060000000000000000000000000000000000d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x2537d20}, {&(0x7f0000019b00)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x2537e40}, {&(0x7f0000019c00)="000000000000000000070000000000000000000000000000000080d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000700000000000000", 0x60, 0x2537ee0}, {&(0x7f0000019d00)="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"/416, 0x1a0, 0x2538000}, {&(0x7f0000019f00)="000000000000000000000000000000000000000000000000000000010000000000000007000000000000000200000000000000b00200000000000000010000000000000007000000000000000200000000000000b00100000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b0070000000000000000c001000000000000010000000000002400000000000000010000000000000005000000000000000200000000000000b00300000000000000004000000000000000010000000000002200000000000000003000000000000000010000000000000100000000000000010000000000000006000000000000000100000000000000b205000000000000000501000000000000000000000000000001000000", 0x1a0, 0x253be60}, {&(0x7f000001a100)="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"/320, 0x140, 0x4000000}, {&(0x7f000001a300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/32, 0x20, 0x4000220}, {&(0x7f000001a400)="00000000000000000000000001000000000000e40000500100000000000080000000000002000000000000000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc000000010000000000220000000000000000000100000001000010000002000100010000000000000000005001000000006c7ed2bf85974c6295dd17018ed3d3dc01000000000000000000d001000000006c7ed2bf85974c6295dd17018ed3d3dc00"/256, 0x100, 0x4000320}, {&(0x7f000001a500)="00000000000000000000000040d2010000000005000000000000000040500100000000050000000000000000c0d1010000000005000000000000000000d0010000000004000000000000000000d2010000000005000000000000000000d10100000000040000000000000000000008000000000000020000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0d2010000000006000000000000000040500100000000050000000000000000c0d0010000000006000000000000000080d2010000000006000000000000000000d3010000000006000000000000000080d0010000000006000000000000000000000800000000003002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d301000000000700000000000000004050010000000005000000000000000080d3010000000007000000000000000080d2010000000006000000000000000000d3010000000006000000000000000080d0010000000006000000000000000000000800000000003002000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040d001000000000400000000000000000050010000000004000000000000000080d0010000000004000000000000000000d00100000000040000000000000000c0d0010000000004000000000000000000d101000000000400000000000000000000080000000000000200000000000100"/640, 0x280, 0x4000b20}, {&(0x7f000001a800)="15f7deadf16827db000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d001000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000050000000000000002000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c00"/160, 0xa0, 0x4500000}, {&(0x7f000001a900)="0000000000000000000000000000000000000000000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000077f025abd39f6b17000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00040d001000000000100000000000001bfadffc0896b4f889c9b098a6c213e59060000000000000005000000000000001c000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c0000000001000000000000544bae790400000000cc3e0000230000000001000000000000546b826b1100000000a53e000027000000000100000000000054bf5d291700000000823e000023000000000100000000000054bcde42e5000000005f3e000023000000000100000000000054482d12f6000000003c3e00002300000001010000000000000100000000000000009c3d0000a000000001010000000000000c00010000000000008d3d00000f0000000101000000000000544bae7904000000006a3d000023000000010100000000000054482d12f600000000473d0000230000000201000000000000010000000000000000a73c0000a000000002010000000000000c0101000000000000983c00000f00000002010000000000006c0000000000000000693800002f0400000301000000000000010000000000000000c9370000a000000003010000000000000c0101000000000000ba3700000f00000003010000000000006c00000000000000007f3700003b0000000401000000000000010000000000000000df360000a000000004010000000000000c0001000000000000d03600000f00000004010000000000001822a8f12600000000a13600002f000000040100000000000018d65ba13500000000723600002f00000004010000000000006c0000000000000000533600001f0000000501000000000000010000000000000000b3350000a000000005010000000000000c0001000000000000953500001e00000005010000000000006c000000000000000060350000350000000601000000000000010000000000000000c0340000a000000006010000000000000c0001000000000000ad3400001300000006010000000000006c000000000000000034340000790000", 0x3e0, 0x4503f40}, {&(0x7f000001ad00)="0000000000000000000000000000000000000000000000000006000000000000006400000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c6572730600000000000000090066696c652e636f6c6406000000000000000600000000000000000000000000000000000000000000000000000000000000010000000000000000000000ff810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a0600000000000000003000000000000000000000010000d000000000000030000000000000000000000000000000300000000000000400000000000000050066696c65320500000000000000050066696c653306000000000000000600000000000000000000000000000000000000000000000000000000000000010000000000000000000000ff810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a06000000000000000a00000000000000000000000073797a6b616c6c6572730000000000000000000000000000000000060000000000000006000b0008757365722e7861747472317861747472310000000000000000000000000000000000060000000000000006000b0008757365722e7861747472327861747472320300000000000000050066696c653106000000000000000600000000000000000000000000000000000000000000000000000000000000010000000000000000000000ff810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a0600000000000000260000000000000000000000002f746d702f73797a2d696d61676567656e3138373933373939342f66696c65302f66696c65300300000000000000050066696c653106000000000000000600000000000000000000000000000000000000000000000000000000000000010000000000000000000000ffa10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a06000000000000001a04000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c0200000000000000050066696c653006000000000000000600000000000000000000000000000000000000000000000000000000000000010000000000000000000000ff810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a03010000000000000100000000000000000600000000000000000005000766696c653102010000000000000100000000000000000600000000000000000005000166696c65300200000000000000050066696c653006000000000000000600000000000000000000000000000000000000000000000000000000000000010000000000000000000000ff410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a04010000000000000100000000000000000600000000000000000005000166696c653105010000000000000100000000000000000600000000000000000005000166696c653205010000000000000100000000000000000600000000000000000005000166696c653306010000000000000100000000000000000600000000000000000009000166696c652e636f6c6401010000000000000100000000000000000600000000000000000005000266696c6530000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000065b5585db22d341d000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00080d001000000000100000000000001bfadffc0896b4f889c9b098a6c213e59060000000000000007000000000000000100000000f6ffffffffffffff800000d00000000000833f0000180000000000", 0xc00, 0x4507480}, {&(0x7f000001b900)="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"/448, 0x1c0, 0x450bfe0}, {&(0x7f000001bb00)="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", 0x200, 0x450fe60}, {&(0x7f000001bd00)="dd81759fbd802e6d000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00040d101000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb3e0000a000000000010000000000000c0001000000000000ef3e00000c00"/160, 0xa0, 0x4514000}, {&(0x7f000001be00)="0000000000000000000000000000000000000000000000000000000002002e2e04000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f0000000000000000000000000000000000000000d964a0ce93c73224000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00080d101000000000100000000000001bfadffc0896b4f889c9b098a6c213e590400000000000000090000000000000001000000007d5aba496ab34ae2fbbe829bc48fe9049c933f0000080000000000", 0x140, 0x4517f40}, {&(0x7f000001c000)="0000000000000000000000000000000000000000000000000500000000000000fd2e32b6e552c867000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000c0d101000000000100000000000001bfadffc0896b4f889c9b098a6c213e59050000000000000002000000000000000b000000000000d00000000000c00000800000000000833f0000180000000000500100000000c000008000000000006b3f0000180000000040500100000000a900000000000000004a3f0000210000000000d00100000000a90000000000000000293f0000210000000000d00100000000c00000000200000000113f0000180000000000d10100000000a90000000000000000f03e0000210000000040d10100000000a90000000000000000cf3e0000210000000080d10100000000a90000000000000000ae3e00002100000000c0d10100000000a900000000000000008d3e0000210000000000d20100000000a900000000000000006c3e0000210000000040d20100000000a900000000000000004b3e0000210000000080d10100000000a900000000000000004b3e0000210000000080d10100000000a90000000000000000333e0000210000000000500000000000c00000800000000000f33e000018", 0x1e0, 0x451bfe0}, {&(0x7f000001c200)="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"/672, 0x2a0, 0x451fe80}, {&(0x7f000001c500)="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", 0x2c0, 0x4523ea0}, {&(0x7f000001c800)="0000000000000000000000000000000000000000040000000000000000010000000000000040d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x4527560}, {&(0x7f000001c900)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x4527720}, {&(0x7f000001ca00)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x4527840}, {&(0x7f000001cb00)="0000040000000000000000000000000000000000d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/96, 0x60, 0x45278e0}, {&(0x7f000001cc00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed41", 0x120, 0x45279e0}, {&(0x7f000001ce00)="00000000000000000000040000000000000000010000000000000000d001000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000000000007d5aba496ab34ae2be829bc48fe9049c00"/128, 0x80, 0x4527b60}, {&(0x7f000001cf00)="000000000000000000000000000000000053bc645f000000000000000053bc645f00"/64, 0x40, 0x4527c00}, {&(0x7f000001d000)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x4527c80}, {&(0x7f000001d100)="000000000000000000000000000000000000050000000000000000000000000000000000d20100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000500"/128, 0x80, 0x4527d20}, {&(0x7f000001d200)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x4527e40}, {&(0x7f000001d300)="0000000000000000000500000000000000000000000000000000c0d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000500000000000000", 0x60, 0x4527ee0}, {&(0x7f000001d400)="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"/992, 0x3e0, 0x4528000}, {&(0x7f000001d800)="06000000000000006400000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c6572730600000000000000090066696c652e636f6c6406000000000000000600000000000000640000000000000064000000000000000000000000000000010000000000000000000000ed810000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a0600000000000000003000000000000000000000010000d000000000000030000000000000000000000000000000300000000000000400000000000000050066696c65320500000000000000050066696c653306000000000000000600000000000000282300000000000000300000000000000000000000000000020000000000000000000000ed810000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a06000000000000000a00000000000000000000000073797a6b616c6c6572730000000000000000000000000000000000060000000000000006000b0008757365722e7861747472317861747472310000000000000000000000000000000000060000000000000006000b0008757365722e7861747472327861747472320300000000000000050066696c6531060000000000000006000000000000000a000000000000000a000000000000000000000000000000010000000000000000000000ed810000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a0600000000000000260000000000000000000000002f746d702f73797a2d696d61676567656e3138373933373939342f66696c65302f66696c65300300000000000000050066696c653106000000000000000600000000000000260000000000000026000000000000000000000000000000010000000000000000000000ffa10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a06000000000000001a04000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c0200000000000000050066696c6530060000000000000006000000000000001a040000000000001a040000000000000000000000000000010000000000000000000000ed810000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a03010000000000000100000000000000000600000000000000000005000766696c653102010000000000000100000000000000000600000000000000000005000166696c653003010000000000000100000000000000000600000000000000000005000766696c653102010000000000000100000000000000000600000000000000000005000166696c65300200000000000000050066696c653006000000000000000600000000000000140000000000000000000000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a54bc645f000000000ec2be1a06010000000000000100000000000000000600000000000000000009000166696c652e636f6c6405010000000000000100000000000000000600000000000000000005000166696c653305010000000000000100000000000000000600000000000000000005000166696c653204010000000000000100000000000000000600000000000000000005000166696c653101010000000000000100000000000000000600000000000000000005000266696c653004010000000000000100000000000000000600000000000000000005000166696c653105010000000000000100000000000000000600000000000000000005000166696c653205010000000000000100000000000000000600000000000000000005000166696c653306010000000000000100000000000000000600000000000000000009000166696c652e636f6c6401010000000000000100000000000000000600000000000000000005000266696c6530000000000000000002002e2e030000000000000006000000000000003a0000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000054bc645f000000000ec2be1a54bc645f000000000ec2be1a53bc645f0000000000000000d75b8c9b20397f71000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a000c0d201000000000100000000000001bfadffc0896b4f889c9b098a6c213e59060000000000000001000000000000000a000000000200000000000000840000000000000000e43d0000b701000004000000000000008400000000000000002d3c0000b701000005000000000000000c06000000000000001c3c0000110000000500000000000000840000000000000000653a0000b70100000600000000000000010000000000000000c5390000a000000006000000000000000c0600000000000000b93900000c000000060000000000000054d2c2bf8d0000000094390000250000000700000000000000840000000000000000dd370000b7010000090000000000000084000000000000000026360000b7010000f7ffffffffffffff8400000000000000006f340000b701000000", 0xdc0, 0x452b3a0}, {&(0x7f000001e600)="0000000000000000000000000000000000000000040000000000000000010000000000000040d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x452f560}, {&(0x7f000001e700)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x452f720}, {&(0x7f000001e800)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x452f840}, {&(0x7f000001e900)="0000060000000000000000000000000000000080d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x452f8e0}, {&(0x7f000001ea00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff00"/320, 0x140, 0x452f9e0}, {&(0x7f000001ec00)="00000000000000000000060000000000000000010000000000000080d201000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000006000000000000007d5aba496ab34ae2be829bc48fe9049c0000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000054bc645f00000000d58f461b53bc645f00"/224, 0xe0, 0x452fb60}, {&(0x7f000001ed00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x452fc80}, {&(0x7f000001ee00)="000000000000000000000000000000000000060000000000000000000000000000000000d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x452fd20}, {&(0x7f000001ef00)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x452fe40}, {&(0x7f000001f000)="0000000000000000000600000000000000000000000000000000c0d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600000000000000", 0x60, 0x452fee0}, {&(0x7f000001f100)="93186b8213a426f8000000000000000000000000000000000000000000000000cdbfac4fc9184e3f9b627be6b63688a00000d301000000000100000000000001bfadffc0896b4f889c9b098a6c213e590600000000000000040000000000000006000000000000000000000000f90100000000000000733f0000280000000100000000000000cc0000d00000000000433f0000300000000100000000000000cc0000500100000000133f0000300000000100000000000000cc0000d00100000000e33e0000300000000100000000000000cc0000500200000000b33e0000300000000100000000000000cc0000500400000000833e0000300000000000000000", 0x100, 0x4530000}, {&(0x7f000001f200)="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", 0x280, 0x4533ee0}, {&(0x7f000001f500)="0000000000000000000000000000000000000000040000000000000000010000000000000040d10100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000400"/128, 0x80, 0x4537560}, {&(0x7f000001f600)="0000000000000000000000040000000000000000000000000000000080d1010000000000000000000000000040000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x60, 0x4537720}, {&(0x7f000001f700)="000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000", 0x40, 0x4537840}, {&(0x7f000001f800)="0000060000000000000000000000000000000080d00100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/96, 0x60, 0x45378e0}, {&(0x7f000001f900)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff00"/320, 0x140, 0x45379e0}, {&(0x7f000001fb00)="00000000000000000000060000000000000000010000000000000080d201000000000000000000000000004000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000006000000000000007d5aba496ab34ae2be829bc48fe9049c0000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000054bc645f00000000d58f461b53bc645f00"/224, 0xe0, 0x4537b60}, {&(0x7f000001fc00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100"/96, 0x60, 0x4537c80}, {&(0x7f000001fd00)="000000000000000000000000000000000000060000000000000000000000000000000000d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/128, 0x80, 0x4537d20}, {&(0x7f000001fe00)="00000000000000000001000000000000000000000000000000030000000000000000400000000000000000000000000000010000000000000000000000ed4100", 0x40, 0x4537e40}, {&(0x7f000001ff00)="000000000000000000070000000000000000000000000000000080d30100000000000000000000000000400000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000700000000000000", 0x60, 0x4537ee0}, {&(0x7f0000020000)="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"/416, 0x1a0, 0x4538000}, {&(0x7f0000020200)="000000000000000000000000000000000000000000000000000000010000000000000007000000000000000200000000000000b00200000000000000010000000000000007000000000000000200000000000000b00100000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b0070000000000000000c001000000000000010000000000002400000000000000010000000000000005000000000000000200000000000000b00300000000000000004000000000000000010000000000002200000000000000003000000000000000010000000000000100000000000000010000000000000006000000000000000100000000000000b205000000000000000501000000000000000000000000000001000000", 0x1a0, 0x453be60}], 0x0, &(0x7f0000020400)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendfile(r1, r2, 0x0, 0x4) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000f80)={{{@in6=@local, @in=@broadcast}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) [ 465.401892][ T38] audit: type=1804 audit(1638022420.413:793): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/475/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 465.408808][ T9411] loop3: detected capacity change from 0 to 264192 [ 465.477357][ T9411] BTRFS: device fsid cdbfac4f-c918-4e3f-9b62-7be6b63688a0 devid 1 transid 7 /dev/loop3 scanned by syz-executor.3 (9411) 14:13:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 465.605453][ T9411] BTRFS info (device loop3): flagging fs with big metadata feature [ 465.627982][ T9411] BTRFS info (device loop3): disk space caching is enabled [ 465.641007][ T9411] BTRFS info (device loop3): has skinny extents [ 465.814504][ T9411] BTRFS info (device loop3): enabling ssd optimizations 14:13:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:40 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xf92eb000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x80, 0x50b340) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) sendfile(r5, r1, 0x0, 0x100000000) [ 466.490817][ T38] audit: type=1804 audit(1638022421.503:794): pid=9456 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/477/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:13:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7f, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x1000, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x3ea, 0x5}) 14:13:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:41 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000097bf4c28fb2abf00000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46fcd30e", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x3, 0x45c9) [ 466.937754][ T38] audit: type=1804 audit(1638022421.953:795): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/478/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 466.971899][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:42 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:42 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x14801) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8b, 0x66}) 14:13:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x6041) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl(r0, 0x7, &(0x7f0000000000)="087beaa395b21f4d927aecfb1cd9467e4831c122d2af0cb116c3e901cf7fea0a85a22766069913f132890b92bc4f343e2443c8c19801d34327cad7241faa36ec5658a4cbcf7fb10f11815528b8ca0202e1ed5cfa677a1167a7d41d27c40d12b747f19ef80dabadd870521b97ed804406deb0bfc6fe2dd82ce917e9c7fa55c50688bf5996b56401f3c4775fda35cc883bae4c872138ea961cd0caade21070681ca995a9046f611268253029f8f9c371fb4f36ce477679c51f7960ec8ff8678ddf9f3d2da7b91a0d9153e4d644262faa47a7f34d39243c6be75addd4b0db042c23a0758a27ed95917834019c20f31e80aae27e2ef13fde00b1e8") 14:13:42 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:42 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:42 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000240)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), r2) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:42 executing program 3: sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x4040800) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000007010200000000000000000c0000250c00034000000000000000050800054000000003240007cd0800014000000004080001400000000008009eec815a98742de5018702400000000908000240000000030100034000000000000000040c000240000000000000ffff"], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x4, 0x79bd42) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 467.792378][ T38] audit: type=1804 audit(1638022422.803:796): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/479/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 467.831649][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:43 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x80000001, 0x149041) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x1fce5a6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:43 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="010090c900000000000005000000080003008390fe93b63fbca8437854d8b0ee6abe9b6d541b5a1f5f7bf1b39ee3df2c8d6609e30cb72bef83dbdc93fd655627fb24ea75235b870b2e458ece3af57b5e5862f0322c2cd4ee034d4d909cd2714fd160a08f3a6cbb4043f597fef235c5c8467609bb4e296cc6abbf27222125db16331bad3ce7f092847bbb877c775461ed5000b7e89783281d56c45953146a257f7efb6180181f1efced713cf310deefba60", @ANYRES32, @ANYRESDEC, @ANYBLOB="5179654c2c0a5a97cc926d10429bb12c9405d4bd1c9fe3a4e054d889449cac41322c2b87bc15f565e795a7b97a4833ce"], 0x24}}, 0x4) openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000280)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff8305d5fe4d6d0d1688edb86a454180119d88f2f096665c67e45902ac319084cdd005f64e4a1d9b7c4c877fc9aa5b41a20eb6f2302f8ed4d6ff4dd5b1ac29cf", @ANYRES32=r4], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) [ 468.490815][ T38] audit: type=1804 audit(1638022423.503:797): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/481/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 468.530887][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:43 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:43 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x20) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 468.942448][ T38] audit: type=1804 audit(1638022423.953:798): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/482/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 468.986990][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:44 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x90000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) r6 = openat2(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xb0500, 0x8, 0x8}, 0x18) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000240)=0x401) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:44 executing program 3: syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000280)={0x2d, 0x28, 0x9, 0x17, 0x9, 0x40, 0x6, 0x52, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10000}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000080)={r4, 0x9}) 14:13:44 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:44 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x8, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) dup2(0xffffffffffffffff, r1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 469.662630][ T38] audit: type=1804 audit(1638022424.673:799): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/483/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:13:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x31b1c0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendfile(r0, r1, &(0x7f0000000040)=0xffffffffffffffe6, 0x401) 14:13:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x8400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:44 executing program 3: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400d62, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x400, 0x7, {0xffffffffffffffff}, {0xee00}, 0x400, 0x4}) 14:13:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x2, 0xfffff801, 0x4939, 0x9297, 0x400, 0x3ff, 0xffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0xfff], 0x75, 0x10, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4}, {0x0, 0x6, 0x3}, 0x10001, 0x4}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "b359", 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00./film0\x00']) 14:13:45 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 470.256173][ T38] audit: type=1804 audit(1638022425.273:800): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/484/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:13:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:45 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x40082) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 14:13:45 executing program 3: syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2}, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x1, 0x1611, &(0x7f0000000680)=[{&(0x7f0000000080)="4915e7f27b7cac2278f1ab8dbb38", 0xe}, {&(0x7f0000000340)="b791a7e9733bd33f960b38c3aeb93afa5407378c0d5fddb213da5f67ea9842842bdc37156f08af2f6f636db3ebe38d9c6b3566416465e27609b1599b36ae1d276660dd48fa68f1af7e58aa6c74a304aed0f69da424da0f30c59ff9e4d4a5a189472afdddc42c5e6b06462727bff6bcaf8ddf1a0e159dbbfad3145332eecd7d27306f7ff5b49eb41b0b600700654931144e6c3b05cb03aaee6da587e8a64bfaac406493d45282580f7fc49bfa670664b760ffcf0c8a586f6d02a41ccc692ebe25419b361cefbb9595e33a9a4aa751c19a402a0463201ea57d380bae8d05ab9d71db76e2b8", 0xe4}, {&(0x7f00000000c0)="0a201e5202480b3ff9bcfa22a52db9ae422a3eb8bba1a53f75ef852e7397419c92ca1a11558a42a82822f259e7a7ef7fdde699fae6a2ae24924c9344dee797", 0x3f}, {&(0x7f0000000140)="b676720960aa878e84d464a50d4af93e931243e2a8b732dd33ab2b3e52c7a33e06cf508c48ae0de679415e63b9195ae0d1dab6b6742d90b40bcd69", 0x3b}, {&(0x7f0000000440)="ac48bab9b1db84b139a4d59683c4edc4e652957d75aeb24deee6717ad8a80375bab14e8b1186f0834e00650ee093af853467306e4c7cad8ec76491d6eb0c9e01a1906db5583a86dfafc8f28679ff7442750525ace82f49fd1e57aedb26ccd898325fe9ed051ebfa991963297b173245a818bac60b5aa3191a1950d463fcaa55d2bdc218f45545ba18b3b6034c541c5d9b8d0e142db21042c0965ddafd2975b8d60156bb04539acda25023e064fdfde33471619369671bb22b0b5be6ac80ed6b494cbe2fcfd1a", 0xc6}, {&(0x7f0000000540)="22020e9925c5736fd3333f8df32948fb14d37a61a05bb3fb23ff63781cf1f2cc19d0ae28d861cbb84eccc1088ab22d659f8d63b59a37f9af661994886ff06e8198eb97dbc9a4b4d986a822a34a1e09dc16dbeb068b731c334abf4969583b4eb8234cb3df3e8b7a7f6c0be9c2bfa418eaafdead0848855f038d119de2f0815b5fbe0236fac61bcec74189528afddb0f27d9c5cf4ba55ee048bc2c4d6bdfebf98bfe72bcf0c387d26b46b31bdbd29be6d90116274b4f274065e193adc5ffdc46df", 0xc0}, {&(0x7f0000000180)="12427593cbd1630935914e07e1f0ce348647", 0x12}, {&(0x7f0000000240)="7d6bdbaae186bb8d0835e93a2b06c8900531381974f7d11cc1385af50a74731681b063dee7325662daba228ae6b354eda07a6f01a8b71a813704ba169c64d0938e25368899322205f53778a71b4e9ede39dbba041e5b67e252", 0x59}, {&(0x7f0000000600)="6a75f395d360214c4a32db4f58f8750aa51914e04960ff37379482ba14dcc97e725922ef90fd1a2b03f4a59760eb3f9113d66c5bc65c032b12106e2ceccf78f232052eb8853c", 0x46}], 0x9, 0x6, 0x1}, 0x3f) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x64, 0xfffffffffffffdd2, 0x1d}) 14:13:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2000003, 0x1c043) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 14:13:45 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4) sendfile(r2, r1, 0x0, 0x100004000) 14:13:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 470.893356][ T38] audit: type=1804 audit(1638022425.903:801): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/485/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:13:46 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:46 executing program 3: syz_open_dev$dri(&(0x7f0000000040), 0x76a058cf, 0x80000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2801, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={0x80000001, 0x80, 0x8, 0x81}) 14:13:46 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x420000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="0005a7591ef1548ad3000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x840) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) [ 471.475823][ T38] audit: type=1804 audit(1638022426.493:802): pid=9572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/486/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:13:46 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x90000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) r6 = openat2(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xb0500, 0x8, 0x8}, 0x18) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000240)=0x401) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:46 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 471.663463][ T38] audit: type=1804 audit(1638022426.673:803): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/757/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 14:13:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000100)={0x5, 0x5}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 471.977393][ T38] audit: type=1804 audit(1638022426.983:804): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/487/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 14:13:47 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) (fail_nth: 1) [ 472.130662][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 472.140926][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 14:13:47 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7f, 0x0, 0xff, 0x4e, 0x0, 0x2, 0xd000, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0xb6, 0xfff}, 0x400, 0x9, 0x18a, 0x5, 0x4, 0x88a1, 0xd0e4, 0x0, 0x80000001, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 472.273746][ T38] audit: type=1804 audit(1638022427.283:805): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/758/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 [ 472.278869][ T9591] FAULT_INJECTION: forcing a failure. [ 472.278869][ T9591] name failslab, interval 1, probability 0, space 0, times 0 [ 472.311565][ C2] vkms_vblank_simulate: vblank timer overrun [ 472.345376][ T9591] CPU: 2 PID: 9591 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 472.356197][ T9591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 472.367431][ T9591] Call Trace: [ 472.371339][ T9591] [ 472.376867][ T9591] dump_stack_lvl+0xcd/0x134 [ 472.383195][ T9591] should_fail.cold+0x5/0xa [ 472.385521][ T38] audit: type=1804 audit(1638022427.403:806): pid=9596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/488/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 472.390549][ T9591] should_failslab+0x5/0x10 [ 472.435087][ T9591] kmem_cache_alloc_trace+0x5c/0x4a0 [ 472.441151][ T9591] alloc_pipe_info+0x10e/0x590 [ 472.446722][ T9591] ? selinux_bprm_committing_creds+0x6f0/0x6f0 [ 472.454499][ T9591] splice_direct_to_actor+0x6f1/0x8c0 [ 472.463420][ T9591] ? generic_file_splice_read+0x6d0/0x6d0 [ 472.471844][ T9591] ? selinux_file_permission+0x36/0x520 [ 472.481505][ T9591] ? do_splice_to+0x250/0x250 [ 472.488384][ T9591] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 472.499046][ T9591] ? security_file_permission+0xab/0xd0 [ 472.508240][ T9591] do_splice_direct+0x1b3/0x280 14:13:47 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 472.516509][ T9591] ? splice_direct_to_actor+0x8c0/0x8c0 [ 472.539707][ T9591] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 472.550240][ T9591] ? security_file_permission+0xab/0xd0 [ 472.567096][ T9591] do_sendfile+0xaf2/0x1250 [ 472.583504][ T9591] ? do_pwritev+0x270/0x270 [ 472.590281][ T9591] ? __context_tracking_exit+0xb8/0xe0 [ 472.599297][ T9591] ? lock_downgrade+0x6e0/0x6e0 [ 472.607670][ T9591] ? lock_downgrade+0x6e0/0x6e0 [ 472.614024][ T9591] __x64_sys_sendfile64+0x1cc/0x210 [ 472.627367][ T9591] ? __ia32_sys_sendfile+0x220/0x220 [ 472.638128][ T9591] ? syscall_enter_from_user_mode+0x21/0x70 [ 472.647772][ T9591] do_syscall_64+0x35/0xb0 [ 472.655461][ T9591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 472.665016][ T9591] RIP: 0033:0x7fc7f3418ae9 [ 472.672903][ T9591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 472.704971][ T9591] RSP: 002b:00007fc7f096d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 472.716829][ T9591] RAX: ffffffffffffffda RBX: 00007fc7f352c020 RCX: 00007fc7f3418ae9 [ 472.730021][ T9591] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000b [ 472.744286][ T9591] RBP: 00007fc7f096d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 472.758362][ T9591] R10: 0000000100004000 R11: 0000000000000246 R12: 0000000000000001 [ 472.773028][ T9591] R13: 00007ffe16cb6a1f R14: 00007fc7f096d300 R15: 0000000000022000 [ 472.784717][ T9591] [ 472.789044][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:47 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) (fail_nth: 2) 14:13:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES64=r5], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 472.996932][ T38] audit: type=1804 audit(1638022428.013:807): pid=9603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/759/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 473.004618][ T9601] FAULT_INJECTION: forcing a failure. [ 473.004618][ T9601] name failslab, interval 1, probability 0, space 0, times 0 [ 473.067817][ T38] audit: type=1804 audit(1638022428.083:808): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/489/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 [ 473.083351][ T9601] CPU: 3 PID: 9601 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 473.129586][ T9601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 473.142260][ T9601] Call Trace: [ 473.147509][ T9601] [ 473.151044][ T9601] dump_stack_lvl+0xcd/0x134 [ 473.156647][ T9601] should_fail.cold+0x5/0xa [ 473.162270][ T9601] should_failslab+0x5/0x10 [ 473.167717][ T9601] __kmalloc+0x7b/0x4d0 [ 473.172707][ T9601] ? alloc_pipe_info+0x1e9/0x590 [ 473.180790][ T9601] alloc_pipe_info+0x1e9/0x590 [ 473.187163][ T9601] ? selinux_bprm_committing_creds+0x6f0/0x6f0 [ 473.194899][ T9601] splice_direct_to_actor+0x6f1/0x8c0 [ 473.201358][ T9601] ? generic_file_splice_read+0x6d0/0x6d0 [ 473.208975][ T9601] ? selinux_file_permission+0x36/0x520 [ 473.215950][ T9601] ? do_splice_to+0x250/0x250 [ 473.221588][ T9601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 473.229691][ T9601] ? security_file_permission+0xab/0xd0 [ 473.237016][ T9601] do_splice_direct+0x1b3/0x280 [ 473.245300][ T9601] ? splice_direct_to_actor+0x8c0/0x8c0 [ 473.252815][ T9601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 473.261631][ T9601] ? security_file_permission+0xab/0xd0 [ 473.269726][ T9601] do_sendfile+0xaf2/0x1250 [ 473.277570][ T9601] ? do_pwritev+0x270/0x270 [ 473.285346][ T9601] ? __context_tracking_exit+0xb8/0xe0 [ 473.293526][ T9601] ? lock_downgrade+0x6e0/0x6e0 [ 473.299992][ T9601] ? lock_downgrade+0x6e0/0x6e0 [ 473.306760][ T9601] __x64_sys_sendfile64+0x1cc/0x210 [ 473.315303][ T9601] ? __ia32_sys_sendfile+0x220/0x220 [ 473.321834][ T9601] ? syscall_enter_from_user_mode+0x21/0x70 [ 473.330376][ T9601] do_syscall_64+0x35/0xb0 [ 473.337058][ T9601] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 473.346107][ T9601] RIP: 0033:0x7fc7f3418ae9 [ 473.352305][ T9601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.380137][ T9601] RSP: 002b:00007fc7f098e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 473.394164][ T9601] RAX: ffffffffffffffda RBX: 00007fc7f352bf60 RCX: 00007fc7f3418ae9 [ 473.406076][ T9601] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000b [ 473.418254][ T9601] RBP: 00007fc7f098e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 473.430966][ T9601] R10: 0000000100004000 R11: 0000000000000246 R12: 0000000000000001 [ 473.441930][ T9601] R13: 00007ffe16cb6a1f R14: 00007fc7f098e300 R15: 0000000000022000 [ 473.453149][ T9601] 14:13:48 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:48 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:48 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) (fail_nth: 3) [ 473.629722][ T38] audit: type=1804 audit(1638022428.643:809): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/760/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 473.650479][ T9611] FAULT_INJECTION: forcing a failure. [ 473.650479][ T9611] name failslab, interval 1, probability 0, space 0, times 0 [ 473.680816][ T9611] CPU: 0 PID: 9611 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 473.691348][ T9611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 473.703032][ T9611] Call Trace: [ 473.707448][ T9611] [ 473.711235][ T9611] dump_stack_lvl+0xcd/0x134 [ 473.716984][ T9611] should_fail.cold+0x5/0xa [ 473.723056][ T9611] should_failslab+0x5/0x10 [ 473.728767][ T9611] kmem_cache_alloc_trace+0x5c/0x4a0 [ 473.735359][ T9611] ? in_gate_area_no_mm+0x4c/0x70 [ 473.741509][ T9611] __iomap_dio_rw+0x232/0x1a10 [ 473.749884][ T9611] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 473.757608][ T9611] ? iomap_dio_bio_iter+0x1530/0x1530 [ 473.764910][ T9611] ? down_read+0x198/0x440 [ 473.771510][ T9611] ? rwsem_down_read_slowpath+0x990/0x990 [ 473.781256][ T9611] iomap_dio_rw+0x38/0x90 [ 473.789042][ T9611] ext4_file_read_iter+0x41c/0x5d0 [ 473.798390][ T9611] generic_file_splice_read+0x453/0x6d0 [ 473.808013][ T9611] ? folio_flags.constprop.0+0x70/0x70 [ 473.819928][ T9611] ? security_file_permission+0xab/0xd0 [ 473.830847][ T9611] ? folio_flags.constprop.0+0x70/0x70 [ 473.848593][ T9611] do_splice_to+0x1bf/0x250 [ 473.856896][ T9611] ? selinux_bprm_committing_creds+0x6f0/0x6f0 [ 473.867067][ T9611] splice_direct_to_actor+0x2c2/0x8c0 [ 473.876740][ T9611] ? generic_file_splice_read+0x6d0/0x6d0 [ 473.885354][ T9611] ? do_splice_to+0x250/0x250 [ 473.893084][ T9611] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 473.908192][ T9611] ? security_file_permission+0xab/0xd0 [ 473.915185][ T9611] do_splice_direct+0x1b3/0x280 [ 473.922460][ T9611] ? splice_direct_to_actor+0x8c0/0x8c0 [ 473.929188][ T9611] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 473.937250][ T9611] ? security_file_permission+0xab/0xd0 [ 473.944854][ T9611] do_sendfile+0xaf2/0x1250 [ 473.951963][ T9611] ? do_pwritev+0x270/0x270 [ 473.960585][ T9611] ? __context_tracking_exit+0xb8/0xe0 [ 473.969258][ T9611] ? lock_downgrade+0x6e0/0x6e0 [ 473.975743][ T9611] ? lock_downgrade+0x6e0/0x6e0 [ 473.982130][ T9611] __x64_sys_sendfile64+0x1cc/0x210 [ 473.991411][ T9611] ? __ia32_sys_sendfile+0x220/0x220 [ 473.998930][ T9611] ? syscall_enter_from_user_mode+0x21/0x70 [ 474.006678][ T9611] do_syscall_64+0x35/0xb0 [ 474.013421][ T9611] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 474.023425][ T9611] RIP: 0033:0x7fc7f3418ae9 [ 474.031012][ T9611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 474.061108][ T9611] RSP: 002b:00007fc7f098e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 474.071189][ T9611] RAX: ffffffffffffffda RBX: 00007fc7f352bf60 RCX: 00007fc7f3418ae9 [ 474.081699][ T9611] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000b [ 474.092437][ T9611] RBP: 00007fc7f098e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 474.104242][ T9611] R10: 0000000100004000 R11: 0000000000000246 R12: 0000000000000001 [ 474.115313][ T9611] R13: 00007ffe16cb6a1f R14: 00007fc7f098e300 R15: 0000000000022000 [ 474.126909][ T9611] 14:13:49 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="156dff", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:49 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) (fail_nth: 4) [ 474.308154][ C2] vkms_vblank_simulate: vblank timer overrun 14:13:49 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:49 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 474.386916][ T9618] FAULT_INJECTION: forcing a failure. [ 474.386916][ T9618] name failslab, interval 1, probability 0, space 0, times 0 [ 474.424129][ T9618] CPU: 1 PID: 9618 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 474.436805][ T9618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 474.448808][ T9618] Call Trace: [ 474.453434][ T9618] [ 474.457318][ T9618] dump_stack_lvl+0xcd/0x134 [ 474.463289][ T9618] should_fail.cold+0x5/0xa [ 474.469148][ T9618] should_failslab+0x5/0x10 [ 474.475183][ T9618] kmem_cache_alloc+0x5d/0x560 [ 474.481201][ T9618] ext4_init_io_end+0x23/0x170 [ 474.488071][ T9618] ext4_writepages+0x8fb/0x3b90 [ 474.494377][ T9618] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 474.501772][ T9618] ? deref_stack_reg+0xee/0x150 [ 474.508075][ T9618] ? arch_stack_walk+0x5c/0xe0 [ 474.515168][ T9618] ? __ext4_mark_inode_dirty+0x8d0/0x8d0 [ 474.522498][ T9618] ? unwind_next_frame+0xee1/0x1ce0 [ 474.529525][ T9618] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 474.538234][ T9618] ? preempt_count_add+0x74/0x140 [ 474.544895][ T9618] ? kernel_text_address+0x31/0x60 [ 474.552250][ T9618] ? create_prof_cpu_mask+0x20/0x20 [ 474.559435][ T9618] ? arch_stack_walk+0x93/0xe0 [ 474.565726][ T9618] ? __lock_acquire+0x162f/0x54a0 [ 474.571482][ T9618] ? unwind_get_return_address+0x51/0x90 [ 474.579408][ T9618] ? __ext4_mark_inode_dirty+0x8d0/0x8d0 [ 474.586158][ T9618] do_writepages+0x1ab/0x690 [ 474.591875][ T9618] ? writeback_set_ratelimit+0x150/0x150 [ 474.599732][ T9618] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 474.607362][ T9618] ? lock_downgrade+0x6e0/0x6e0 [ 474.614056][ T9618] ? lock_release+0x720/0x720 [ 474.620418][ T9618] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 474.629185][ T9618] ? do_raw_spin_lock+0x120/0x2b0 [ 474.635332][ T9618] ? do_raw_spin_unlock+0x171/0x230 [ 474.642924][ T9618] ? _raw_spin_unlock+0x24/0x40 [ 474.649213][ T9618] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 474.657994][ T9618] filemap_fdatawrite_wbc+0x143/0x1b0 [ 474.665692][ T9618] filemap_write_and_wait_range+0xe1/0x1a0 [ 474.673031][ T9618] ? xas_reload+0x440/0x440 [ 474.678664][ T9618] ? trace_kmalloc+0x32/0xf0 [ 474.685170][ T9618] ? kmem_cache_alloc_trace+0x203/0x4a0 [ 474.691766][ T9618] __iomap_dio_rw+0x5d4/0x1a10 [ 474.697607][ T9618] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 474.705521][ T9618] ? iomap_dio_bio_iter+0x1530/0x1530 [ 474.712118][ T9618] ? down_read+0x198/0x440 [ 474.717835][ T9618] ? rwsem_down_read_slowpath+0x990/0x990 [ 474.727148][ T9618] iomap_dio_rw+0x38/0x90 [ 474.734010][ T9618] ext4_file_read_iter+0x41c/0x5d0 [ 474.741900][ T9618] generic_file_splice_read+0x453/0x6d0 [ 474.753059][ T9618] ? folio_flags.constprop.0+0x70/0x70 [ 474.761401][ T9618] ? security_file_permission+0xab/0xd0 [ 474.767938][ T9618] ? folio_flags.constprop.0+0x70/0x70 [ 474.775702][ T9618] do_splice_to+0x1bf/0x250 [ 474.782099][ T9618] ? selinux_bprm_committing_creds+0x6f0/0x6f0 [ 474.790527][ T9618] splice_direct_to_actor+0x2c2/0x8c0 [ 474.798034][ T9618] ? generic_file_splice_read+0x6d0/0x6d0 [ 474.806239][ T9618] ? do_splice_to+0x250/0x250 [ 474.813078][ T9618] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 474.821892][ T9618] ? security_file_permission+0xab/0xd0 [ 474.830009][ T9618] do_splice_direct+0x1b3/0x280 [ 474.838232][ T9618] ? splice_direct_to_actor+0x8c0/0x8c0 [ 474.846315][ T9618] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 474.854774][ T9618] ? security_file_permission+0xab/0xd0 [ 474.861892][ T9618] do_sendfile+0xaf2/0x1250 [ 474.867696][ T9618] ? do_pwritev+0x270/0x270 [ 474.874314][ T9618] ? __context_tracking_exit+0xb8/0xe0 [ 474.883119][ T9618] ? lock_downgrade+0x6e0/0x6e0 [ 474.889352][ T9618] ? lock_downgrade+0x6e0/0x6e0 [ 474.895914][ T9618] __x64_sys_sendfile64+0x1cc/0x210 [ 474.902598][ T9618] ? __ia32_sys_sendfile+0x220/0x220 [ 474.909073][ T9618] ? syscall_enter_from_user_mode+0x21/0x70 [ 474.916458][ T9618] do_syscall_64+0x35/0xb0 [ 474.923340][ T9618] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 474.931637][ T9618] RIP: 0033:0x7fc7f3418ae9 [ 474.937331][ T9618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 474.966156][ T9618] RSP: 002b:00007fc7f098e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 474.978014][ T9618] RAX: ffffffffffffffda RBX: 00007fc7f352bf60 RCX: 00007fc7f3418ae9 [ 474.988988][ T9618] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000b [ 474.999592][ T9618] RBP: 00007fc7f098e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 475.010198][ T9618] R10: 0000000100004000 R11: 0000000000000246 R12: 0000000000000001 [ 475.022649][ T9618] R13: 00007ffe16cb6a1f R14: 00007fc7f098e300 R15: 0000000000022000 [ 475.034461][ T9618] 14:13:50 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00009d0000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1}, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe79c, 0x18, "8d4d50810471dae6c716eac31a22140bdd70fe"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r4, @ANYRES16, @ANYRES64, @ANYRESDEC, @ANYBLOB="0107deca1c53", @ANYBLOB="509142203bbd79be29ea9a6f313dacb78db2dd059eeb000d820d41a9ba0d4a1f5f64a4a3436704352205897bbf29a3074072e9f79fe729502d6eb4bbc75b8517a86f26bc"], 0x24}}, 0x4080) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:50 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:50 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 475.373054][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 475.373072][ T38] audit: type=1804 audit(1638022430.383:813): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/762/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 [ 475.731980][ T38] audit: type=1804 audit(1638022430.743:814): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/491/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:13:50 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000170) 14:13:50 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 475.952563][ T38] audit: type=1804 audit(1638022430.963:815): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/763/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:13:51 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xe) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 476.031217][ T38] audit: type=1804 audit(1638022431.043:816): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/491/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:13:51 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 476.210971][ T38] audit: type=1804 audit(1638022431.223:817): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/492/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 14:13:51 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000f00) [ 476.610894][ T38] audit: type=1804 audit(1638022431.613:818): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/764/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:13:51 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:51 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 476.795393][ T38] audit: type=1804 audit(1638022431.813:819): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/493/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 14:13:52 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100001600) 14:13:52 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1fdc3f551d0800d83dc1b8936b531101b9390b169148ee20e1292d51ee13f8ed5b37070dc6539d3ff641c8d4f83f83b7c0465966cb3e585220f1a5dc9eb863035ab69eb226516310c9528a1cdee6ede2a60c9a33fa27820a0112c54aa8f57c444bf351e6ad4e5271ac3d2b765b8304aef83acce1eb769eb83e376546f769f580172ac903b0fdf877739bc5e7597bfa1e461adbc64190d819947a855fe6ca157f4f9122fdea649ed7ef92822b8c896bfc79f605de3baa209c7c49db613d17c2c769b6c36180", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:52 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 477.192256][ T38] audit: type=1804 audit(1638022432.203:820): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/765/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 477.331760][ T38] audit: type=1804 audit(1638022432.343:821): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/494/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 14:13:52 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100001700) 14:13:52 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 477.816245][ T38] audit: type=1804 audit(1638022432.833:822): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/766/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:13:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x7, 0xa4cc, 0x9, 0xa08, 0x1, "76af4b417188bc3f8a604447b759af1a15c01a"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) ioctl$int_out(r1, 0x2, &(0x7f0000000200)) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000180)=ANY=[@ANYBLOB="46c3ee40840e4e355aa92185f32d9b0f53040000", @ANYRES16=r5, @ANYBLOB="ff830500000000000000", @ANYRESHEX=0x0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100004000) write$cgroup_int(r3, &(0x7f0000000000)=0x4, 0x12) 14:13:53 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:53 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100001800) 14:13:53 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:53 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100001f00) 14:13:54 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:54 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="07c54129ee65f67bc700", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:54 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100002000) 14:13:54 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:54 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:54 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:55 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100002200) 14:13:55 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000100)={0x0, 0x20, [0x4, 0x5, 0x1f, 0x1, 0x5, 0x101, 0x0, 0x6]}) sendfile(r2, r1, 0x0, 0x100004000) 14:13:55 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 480.597422][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 480.597439][ T38] audit: type=1804 audit(1638022435.613:831): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/499/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:13:55 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100002300) [ 480.815708][ T38] audit: type=1804 audit(1638022435.833:832): pid=9719 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/771/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 14:13:55 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:56 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x339742, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400040042cab7dfdb07c602419efe6b4ad7142de63d66b0785934cb438ef847118f1836e56dd34d22ce9b69f40aa567317cee434f32b48b079f9fab1bb36422c6", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x804) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="fb9fbd6d84ef0c4b526f5cdf48ec668e009d780000000083818bbbf7dde977a79144887232a7b735b3ba0d6c5fc1cc002f366a49cd925926505aa6b455b1829e0e73168ba524e4160977639400"/88, @ANYRES32=r4], 0x4}}, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') sendfile(r2, r1, 0x0, 0x100004000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200301, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000810}, 0x1000c0c1) 14:13:56 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100002400) 14:13:56 executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 481.391375][ T38] audit: type=1804 audit(1638022436.403:833): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/772/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 14:13:56 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100002f00) 14:13:56 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 481.886906][ T38] audit: type=1804 audit(1638022436.903:834): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/773/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 [ 481.936662][ T38] audit: type=1800 audit(1638022436.953:835): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="pids.current" dev="sda1" ino=1173 res=0 errno=0 14:13:57 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="3000c8000000000000000038b4033548fac745fa460000000008", @ANYRES16=r0, @ANYRESDEC=r1, @ANYRESHEX]) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r8, @ANYRESDEC, @ANYBLOB="013a6a8e04000900000000000000080003004f7bb781524b715d417904e84fec3d91d5b1920647078a6d0b3a10b8d7fcf5afe1929ed2f6c2a2b5b6f543d790836554b97b33abbc6bd9bbc05dbe4c3387dbde1c86da259dbd2467381d66da5376f56ae1d2cb", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYBLOB="1339fad9fa16bd0698a6d0ad5ee95a", @ANYRES16=r5, @ANYBLOB="ff830500000000000000", @ANYRES32=r6], 0x4}}, 0x4) mmap(&(0x7f00007c1000/0x1000)=nil, 0x1000, 0x200000b, 0x12, r2, 0x7999000) sendfile(r4, r3, 0x0, 0x100004000) 14:13:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100003000) [ 482.268420][ T38] audit: type=1804 audit(1638022437.283:836): pid=9744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/501/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 [ 482.308233][ T38] audit: type=1804 audit(1638022437.293:837): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/774/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 14:13:57 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:57 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100003900) 14:13:57 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 482.700926][ T38] audit: type=1804 audit(1638022437.713:838): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/501/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 14:13:57 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 482.861415][ T38] audit: type=1804 audit(1638022437.873:839): pid=9752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/775/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 482.925081][ T38] audit: type=1804 audit(1638022437.943:840): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/502/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:13:58 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100003f00) 14:13:58 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:58 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x1d8, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x64}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB, @ANYRESDEC=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:58 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:58 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004002) 14:13:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="3741abe61ac03dca1d21d0d9008ca9e54fdcdc73e016947a2367c31da6d1404a39d557302107e1beb225fd677cbc6eccd58cbf3d2b5e2eb68a6c668b579c799167d41a4b7eb44d20408c057b4e018ab66d48efedccc56d8e8460c76c99086194706ed51126a94f23eb5f2d8e04ac97fa7f5a9fab3d7456a24fa23961ffd016d6bdb76b16230a926857da051371fe673bf6066a28e20f0f70593776b65f979ed782a8997b3cd33ba0ad61eac1"], 0x7bc11a) syz_open_pts(0xffffffffffffffff, 0x400000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000014c0)={{0x0, 0x80000001, 0x0, 0x400000000557, 0x1, 0x60, 0xfffffffffffffffc, 0xb2, 0x80000000, 0xf044, 0x7, 0x7fff, 0x9, 0xffffffffffffffc1, 0xa}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/110, 0x6e}], 0x2, 0xfffff801, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000003}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100004000) 14:13:59 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:59 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, r3, 0x7}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:13:59 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004003) 14:13:59 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:13:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:13:59 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004004) 14:14:00 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:00 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:00 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004005) [ 485.772185][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 485.772201][ T38] audit: type=1804 audit(1638022440.783:848): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/780/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:01 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x5, 0x14200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) ioctl$FITHAW(r4, 0xc0045878) setuid(0x0) syz_mount_image$ubifs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x90, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="a3da791871a7af5a5ddda601017bbe2a534658f469f777bc45964bef12a70002ed5a502edbf19d784f9e86e941ec3d0d622593bc53724407ee389df190d2c6b02c477c81c3af7bfb1fb5dc6f47c08c61bf4a98dda6408ff5ee24a9de5ea24a8b7b0820be91f9e7163d586d1ecfad9d363fb0eb755f5a4c505b40e4a380d40e3bf6ffc59c98f2b511e353ca503f49512b8868", 0x92, 0xad7}], 0x1000, &(0x7f0000000300)={[{@bulk_read}, {@no_chk_data_crc}, {@auth_key={'auth_key', 0x3d, 'batadv\x00'}}, {@compr_none}, {@compr_none}, {@compr_zstd}, {}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_gt}, {@obj_user={'obj_user', 0x3d, ')/'}}, {@permit_directio}]}) 14:14:01 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 486.221174][ T9837] loop2: detected capacity change from 0 to 10 14:14:01 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004006) 14:14:01 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x0, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 486.511983][ T38] audit: type=1804 audit(1638022441.523:849): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/781/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 486.722061][ T38] audit: type=1804 audit(1638022441.733:850): pid=9834 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/507/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 486.812769][ T38] audit: type=1804 audit(1638022441.823:851): pid=9831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/507/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 486.828963][ T9837] loop2: detected capacity change from 0 to 10 [ 486.872903][ T38] audit: type=1800 audit(1638022441.883:852): pid=9834 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1178 res=0 errno=0 14:14:01 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004007) [ 486.903507][ T38] audit: type=1800 audit(1638022441.883:853): pid=9831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1178 res=0 errno=0 14:14:01 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 487.051097][ T38] audit: type=1804 audit(1638022442.063:854): pid=9855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/782/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 14:14:02 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040810) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:02 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x0, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 487.377057][ T38] audit: type=1804 audit(1638022442.373:855): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/508/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:14:02 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004008) [ 487.772387][ T38] audit: type=1804 audit(1638022442.783:856): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/783/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 14:14:02 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:02 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="04000f9d3f73cf0c090074b5f086", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 488.103025][ T38] audit: type=1804 audit(1638022443.113:857): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/509/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:14:03 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x0, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:03 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004009) 14:14:03 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:03 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000240)="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") r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYRESOCT=r6, @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:04 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000400a) 14:14:04 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) socket$inet6_tcp(0xa, 0x1, 0x0) 14:14:04 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:04 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000400b) 14:14:05 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x8300, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="0100000300", @ANYRES32], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f0000000140)=""/99, 0x63}], 0x3, 0x5, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000400)=0x2) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:05 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:05 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000400c) 14:14:05 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:05 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 490.869314][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 490.869327][ T38] audit: type=1804 audit(1638022445.883:865): pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/513/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 14:14:06 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:06 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000400d) 14:14:06 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB="53bf435659b772110e13ec5e1e66e1eaf7bc386687b59221962c7bba69bb324931738f1a5a0d57d105", @ANYRES64, @ANYRESDEC, @ANYBLOB="74446c143e75f75f89093fe4ec1449c173bab6fb114c23923a38351e0eceabb99562c50f1d37db59ef483e965a06689ae02f2a5b577f68e7596646007a9a0277113f453e9f887c6fdbbf551e79651c2229334958256d9c8c8fb3d52a93f22e5ca635c1b58ab9", @ANYRESOCT, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="f6d7e83cf0cc5f18981360fba940595742751dce7dc0395a5920daff01ec30e74efb8ef838c0add9636b7be2d8327ec189c7aa2aee33105298797792bbbe3ebe3ba380a3c6c6533e85d12cb0a7997f1713e7b911634ac2b025a72379f967498f42de4bd3a2636cc7b448f6fe9fdf0f92f760e1970be64bef05268e8a127066753e9bb2d7956b98d04be4bea43ae2310f1e4d5b6903b59a965c30e2def6ceaef276d7ca04e7aec9d6efea5bf2fb2e7d43d9c0e97759b87679cfd3dfc400d881efbcd1"], 0x208e24b) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x3, 0x3ff, 0x80000001, 0x80000001, 0xf9, "55b7510ff6d74f805b88dcac1d74795b0a0147", 0x100, 0x81}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000480)={0x1, 0x2, 0x6, 0x80000001, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8b4625f490f4f14e6bd10e877504cdff8660df5af0f67a6d89fbb5dfe1c090c85f5e2ec327cbdd2fa6257917186e321fdb03fecaff142a748971cd8ab227a8085dbc6693bf1b584c037565f002db5eeec5eb88cebc66443accd159521833c99093cb84c4bf913c9cd1031d2ebfc90b693cd6981f75f1602bfdd18c48cc9a935667f3526d18d43d0d9cc4a299c627858c3b4461def9af2be0889df731d11707e6b8268a00ad851e251f772de65ed28ee0e0ba269e34989180361d4efcb9a0be3e9dafd9812e2a0545b5e214309ff66a96cf1a63fb", @ANYRES16, @ANYBLOB="010000000008000300e05fe4944dcea257d9dd09873fe26c1f288331", @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x200008c1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 491.295228][ T38] audit: type=1804 audit(1638022446.313:866): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/788/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 491.473362][ T38] audit: type=1804 audit(1638022446.483:867): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/514/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 14:14:06 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:06 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000400e) 14:14:06 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES16], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r1, 0xdf7ce000) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4c082) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4f}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0xfd0e, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB='\x00'/10, @ANYRES32=r6, @ANYRESHEX=r0], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100004000) 14:14:06 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 491.962104][ T38] audit: type=1804 audit(1638022446.973:868): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/789/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:07 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000400f) [ 492.348623][ T38] audit: type=1804 audit(1638022447.363:869): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/790/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 14:14:07 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:07 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004010) 14:14:07 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000003a00200028bd7000fddbdf251800000022018d542857ced71669767112335e0004b8429218acd634a0491fb20f45d8dffb0ded879a2f595327cec3c22d5628c23401808c26a595ef479522fe8914e36df03bf1b11288c7cdf6ba5801a5442c6ccb21ca7f10c0c7290ae31e081bfc5b801803c0f98bfa239871f71341300df39b40ec1fe3b5702f282f238e3fa8b40f21eeaa5105007200000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r1, 0x4844c000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16, @ANYRESOCT=r3, @ANYRES16], 0x24}}, 0x24000800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@generic={0xa, "28e2704b8f94251f8d647dbce78c0e1d555470d98d4744f9811c661ceaf610fcdd6b4a4b404b200ec6183c35f204d6ad84aba1bb05ef3dcaccfdb3d703d222db3b18cb4ec298832f26b6b07d3481f3ab8af6db33f138c0c70184e308ae9b5bb70aaa0cb5daffa25518e8664a3365be4b9c0e25086d99c49bc7937b2441c4"}, 0x80, &(0x7f0000001840)=[{&(0x7f00000004c0)="d00570c75acfbaa3edf4fc0162e4da314db40877096566309fd7261c98014635da398f8f657ac637cbff684827cebf3d92143131ed7b5521dd702e8dcedee00620546d086c4d0d98eba0689a173febe205345dc577b8696754c6c088dbd4cf7495c91ab221ae704e9b32e9e81e2eb94a34adfbd338be062e5523c4c1b89509", 0x7f}, {&(0x7f0000000100)="906e391fbff28251", 0x8}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="bf846000957389c4ee8eeceed5c59695fd42cfb1d8fe61a1c31d27621ae9dc6fd543224faa9156e4160c7310f017bd822be4a76e3550db2cc79ddc68c86a76aef3b1506fc4a238c428633a18cd9a1ee46e4422e3ff95adb37857e5ed25f000975ecf9ea220dfd51cb6acb479bcdb2ccab8edceebced6adafd2f662844234ce2a4a269fb4e2fa0e478fb2b384a1ad7fb01ca2616de1baa5d9cec18b2bb1dd0abd2bbc5f18dde92553527fd7534ff0e5ca93b9dd201628245f4e4ca4225b4bf856a649931e9442cf3e7a56e2ea3876c156748ba30d00c6a675f645a0f53a027fce8b3d2e24427ed97b263ac2580a368ccc245f4c5aeace", 0xf6}, {&(0x7f00000017c0)="84b2356c01c983720200b08bde6a7a59456704972b3fbecab917537f9c232c031fec5cf479ad77528a59aad3f4a1c98d16981d86dd372f2feb843a94731aa83162eb5d0d783fb9765efdb4236da9225570b8f77a59cab5fab13023fda16199190224fbd5339176c47c4e2b0289a5bee96933e92d69c9b7165876", 0x7a}], 0x5, &(0x7f00000018c0)=[{0xa8, 0x117, 0x0, "6302d9e6683096cf30d2b65a1669a3b88d10e108aa81459a97fc3ffb34eccfaa603c3c9b23ff669a4834abc66169971d623fb0ff764a60c2381c2801d942d425eec7ece5aafe202311a33af55ca7e977c522e1d39b3124b21750fdae5306e5749830e1bf4beaade5d0945006cd95fc6f169537f973d0a9abe610f08609ab3e3b798c35b04fd33f330c16a677c5bbf6518eb82cf17e4568d4"}, {0xb0, 0x115, 0x3ff, "f4930d96375f94fb76d55d2c4834c06e7b0ef555a4dd53d70e761b7f96b4a5398ce8135da9a3a9da13e0b2a62af4795b861fa1613f05077c0f0a4f893a5bb1c6978666502706f0fac06cc88fb9942e2729632a69dc11cb4dd309d99ffa39a720a190101eb8e9ae8c5c192cfb7d0a710e37445c5d6c0c3a7fc58d18976ade80a6abe3466efdd1150d9653d03dee82203b31d0b3def22d21d1b76200"}, {0x1010, 0x114, 0x3, "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"}], 0x1168}, 0x0, 0x20040000}, 0xc95a) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:07 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 492.910135][ T38] audit: type=1804 audit(1638022447.923:870): pid=9950 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/791/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:08 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x2ffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x0) [ 493.158095][ T38] audit: type=1400 audit(1638022448.173:871): avc: denied { bind } for pid=9956 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 493.194566][ T38] audit: type=1400 audit(1638022448.173:872): avc: denied { node_bind } for pid=9956 comm="syz-executor.2" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 493.239454][ T38] audit: type=1400 audit(1638022448.173:873): avc: denied { connect } for pid=9956 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 493.297292][ T38] audit: type=1804 audit(1638022448.173:874): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/517/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 14:14:08 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004011) 14:14:08 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) syz_open_pts(r1, 0x400140) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x40000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff8305000000000000005dc007fdd379ce4212de8186ee6e148fa990b7f1c8bd3b28d2c73f63db46815dd02ed5330518aae72332e4b9440c6e8ac14981605ec0fbe4f7b96657c11e52cf3e2871baba83025854b9522d31765f65c10d48dce53884d1bb27cc1cfa00d60f28416222fcc379c5f8882568b298d5ba17fe610708b1a9380827e19842299bec699c2d023c61e9108201f379438b5fa7a109ab2d086372bb67a7eddf1c8a3efab18dcfb1b0542ff1", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100004000) 14:14:08 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:08 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:09 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004012) 14:14:09 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000000000000", @ANYRES32=r3], 0x4}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100004000) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x4800, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 14:14:09 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:09 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:09 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004013) 14:14:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004014) 14:14:10 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:10 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004015) [ 496.138461][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 496.138509][ T38] audit: type=1804 audit(1638022451.153:881): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/796/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 14:14:11 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3}, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="46040000", @ANYRESOCT, @ANYBLOB="ff830500000000000000", @ANYBLOB="e2d52761bce2f493bed531aaef3baa0fadcc1553080b7bf48bb41ae2cd2d63e0327273425e1b64fc747de6a8ae9d2785ef9c2735ffcbf34cc3de6919802468e7d0b035965d06271698af09789f8e40cb7b31e6f2871ed6877bb6ab31"], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:11 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee04"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 496.488677][ T38] audit: type=1804 audit(1638022451.493:882): pid=10000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/520/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 14:14:11 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004016) 14:14:11 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) [ 496.933626][ T38] audit: type=1804 audit(1638022451.943:883): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/797/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 497.049846][ T38] audit: type=1804 audit(1638022452.063:884): pid=10011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/521/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:14:12 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee04"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:12 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000180)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x200, 0x0, 0x26, 0x0, 'syz0\x00', 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) sendfile(r2, r5, 0x0, 0x10000) 14:14:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004017) [ 497.829368][ T38] audit: type=1804 audit(1638022452.843:885): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/522/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 497.880688][ T38] audit: type=1804 audit(1638022452.843:886): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/798/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:13 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x5) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESDEC=r6, @ANYRESOCT=r4], 0x58}}, 0x8845) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x5}}, {0x6, 0x4, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc048884}, 0x41) 14:14:13 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee04"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 498.188821][ T38] audit: type=1804 audit(1638022453.203:887): pid=10026 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/523/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 498.234287][ T38] audit: type=1400 audit(1638022453.203:888): avc: denied { create } for pid=10025 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 14:14:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004018) 14:14:13 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 498.568514][ T38] audit: type=1804 audit(1638022453.573:889): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/799/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:14:13 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004019) 14:14:14 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x406000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 499.057853][ T38] audit: type=1804 audit(1638022454.073:890): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/800/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:14:14 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:14 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:14 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401a) 14:14:14 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) bind$netrom(r0, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100)) sendfile(r2, r1, 0x0, 0x100004000) 14:14:15 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:15 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401b) 14:14:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:15 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900790000a56a71ddde2084dcef83", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRESDEC=r1], 0x4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x1d8, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x64}}, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000380)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x20}, @xdp={0x2c, 0x6, 0x0, 0x3b}, @ax25={0x3, @null, 0x7}, 0xff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xb104, 0x8, 0x6}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x180, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x180}}, 0x4004) sendfile(r2, r1, 0x0, 0x100004000) 14:14:15 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401c) 14:14:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:16 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newnexthop={0x24, 0x68, 0x100, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x3c}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x5) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 501.199790][ T38] kauditd_printk_skb: 6 callbacks suppressed 14:14:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 501.199810][ T38] audit: type=1804 audit(1638022456.203:897): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/527/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:16 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401d) 14:14:16 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="8ffa0600a1f40166b8909f495d12014028e2dcaffea940d9fa6366a05b05fb7d4a79813063a168f4db55cedeea5146005d5ea9afec312f3c8fc9ebe1a8a7", @ANYRES16=r7, @ANYRES64, @ANYRES32=r1], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="4604000488f78dcf9b7d9e5e131cb2785626e6c722178c8fc689a7699fb917dc2ad7380c2507e5bf8d3406a9f3e246df280ae0a7a2b359c01c7c56fc68a1d389b156ed221dfb235476bacc828a6ac126be97f0b9b1000ae0cf0ebdf8876ad464293035f6ccdb631bf0a0a4508a15f49e4be3ae4d550aa74506cdee97c75a65a2e1db456ed4401a2848491703bec3755fab44bc7f1fdcb260f7925b0d33d703f1099a6a1aa66ff482c6cc9a421519ccac02116437cd71c3f2cd16714b148ae3db8484e3cfb8e60f4a862faf6e", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 501.822593][ T38] audit: type=1804 audit(1638022456.833:898): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/804/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 14:14:16 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04de"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:17 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:17 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000401e) [ 502.429467][ T38] audit: type=1804 audit(1638022457.443:899): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/805/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 502.618868][ T38] audit: type=1804 audit(1638022457.633:900): pid=10094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/528/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:17 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRES16=r5, @ANYBLOB="ff830500000000000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100004000) 14:14:17 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004021) 14:14:17 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04de"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 502.976422][ T38] audit: type=1804 audit(1638022457.993:901): pid=10104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/806/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 14:14:18 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 503.084142][ T38] audit: type=1804 audit(1638022458.093:902): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/529/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 14:14:18 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004022) 14:14:18 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x9, 0xa000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830104000000000000ffae34e81d20e4e50ad8fa41cd9b27a32a926b19469457d25ae7c3c3eda0a04b6e57a1ff7e826777f5e1dc7497f5a5bce0aa8ac2940252bd0bd26f679fe1d6b066e11318383230f951b2eb389ea1546d910beb4cf558d3ac130e5eb40e150e74010001fa3e55db07a4d6a28b7ee9b91ed22dcca168f4a48594aeefe7081e76800ce98ecf137077169d86e410ec845829305b40555c0de7d6a1c4364e5720dede6caf5e3c1d28", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 503.543594][ T38] audit: type=1804 audit(1638022458.553:903): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/807/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 503.641703][ T38] audit: type=1804 audit(1638022458.653:904): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/530/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 14:14:18 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04de"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:18 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004023) 14:14:19 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 504.068323][ T38] audit: type=1804 audit(1638022459.083:905): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/808/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 14:14:19 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendfile(r2, r1, 0x0, 0x100004000) [ 504.366099][ T38] audit: type=1804 audit(1638022459.383:906): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/531/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 14:14:19 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004024) 14:14:19 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:19 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x20, 0x832, 0x200, 0x3f, 0x4], 0x5, 0x0, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000340)=ANY=[@ANYBLOB="46040000596032e7e42388dc139eb1fec2e670d16bba0a995226bf2ab487843864e5f6c52d9b5409bf68dc9fe16ec4f84bbfc401e4d6987481aca8324d0bec22d554eb9dac7011c53d8bc616dc73bcb9f3038bbf67c0c983b8590a90a078aa3082c2e9", @ANYRES16=r4, @ANYBLOB="ff830500000000000000f2517089d9b493ba17b73ccf6c", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:19 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:20 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:20 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004025) 14:14:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:20 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004026) 14:14:20 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x0, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x0, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:21 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x9c, &(0x7f0000007640)={&(0x7f0000000240)=ANY=[@ANYBLOB="4604cc00", @ANYRES16=r3, @ANYBLOB="ff8305000000000000005e9ca4a51c4aefcec06f68f03162936f0afb81031bcba6a687c5d27738bfef034931cc8d549acb35c7124466b7821d3651d971760e76fed6fb2606a1a0341e3a1da9d9abdb29d374d445c8a12f3a53fa8ac6298f9e22d0f89792f606b95b70e4c6f0866eabf3e6a84e9234cf34b460e8f2f0da859f800120c2185c5814b9ab349f0e13653ced5568a796c8cca1b62de7267102f791240158a494f79705c856cab05a18c0a36728c76c6e0ceb1c4d31511d08529fa6b6eccd562596ba7517", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x5d0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "652fbcf43d267f0fd63b5e18e370b41bd54449a9719d9e183b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4c}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "3df4065484faecdb1515f99aa20a2d18d64da6a842efa094eb4107b4b0254def65d7cf13aaad9c92e8d830ad34beca069a1cc9cb5a8c02a3361f24a70eb028b9d0cba16989220cf599d5f6bac683a1c810fa0930ea36f93aef68e81ca2928ba8fff3ca9d900e37cb0afa14a609648cc816411d525fc88759f5b433ced887254e05f0761547577f41c05cd271f9d5ab43f7cd9648ec5d5991a60830ba8d97d9049722949ced0e819675a38a"}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1e0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x46, 0x3, "c9496389ba3e8a6fbf579c1c3c86c39378f6ba23dfc6d013aeb488ca7f467a41d47d3277bf5a8063429661697314674faddc4abdcc1cf6836c1f7728c562629a7eac"}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "9063625b20fe1895d81c1939038029240599fb05ea7975ad8d4b67de765b37f3639346092de792f564ecb3bc81f5f293a46d0ac3f43347bb5482bce7d987c93b5e95e981f01b9a5ffea24f17ea1b45faa318813f83ecb910f122759f63823ae3a6d12d32c9cbbc69727c4d9eebbea557681207207692b502a99004c605e79343f7074fc671f323c243dbf3d2042ed68862dd92c8f15862a7cc584001bc155ab65bbaeca7c24fea867f40e8c570ad87df6f695460f7087fd100ecb6263ec6170ed2b976b8d691fd6dc91d9d426bc78ff3b9fa706ea47e7208c407f88db569b211f311"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f869d5408239cc258f26c3dcb49c8e217dd817c1f19420c14c5c5e14"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8b2494d32498a41191e6549732c568bfe9f9e82967f6"}}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe4, 0x3, "40a6fd9e03af015e30d600ebe110802d7557bb8946c0f23513161067abbc6f13a58e15e19d74e13d4900605b0bdee66e7f7b0422a125f3ebca94fb52774ed6bdcdcad3567809bb827400b8031d5457c80e13769dfef4b7c0d4a1b7645243f9c162693593ae57be16cf4a7d992e2857b5774602e9248fa709f2041a21fd76719a78521902123b96bf7ee4970c9ee4b4f132d30d52f84cce35fc75e2e411692d4ee910e1141085807808bd8a335d6a24d5169c9f5cb808e578226884e332038d227cefe0528df69040cd5e566f979b51a2a8da9a00cebaf53c98ac0b613fc39e55"}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "5f522d5901a3c7ee51a983441d9366d347fba5882d7135be"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "352504579bddf10297f50a8b1869f64fcdc43daf6a4a4f2d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x31, 0x3, "575140325d632e659bbf59ad2dfd589bc0ffc6b9a6326eb64d0c4499c375205004b6fd4936ee4c3fbd21759aa1"}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x115}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6bf0caeb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x8041}, 0x4084) 14:14:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x0, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 506.252222][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 506.252241][ T38] audit: type=1804 audit(1638022461.263:911): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/534/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:14:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:21 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004027) 14:14:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 506.704762][ T38] audit: type=1804 audit(1638022461.723:912): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/812/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:14:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) ioctl$KDENABIO(r0, 0x4b36) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000", @ANYBLOB="d8bc4e21436bf7196570e4cb4ba5397c3dd861e32294b17e58294af87635a62955114cf84a29e97c86df8aa4b05267f9b230", @ANYBLOB="010090c90000000000000000050000009b00", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRES16, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 507.034477][ T38] audit: type=1804 audit(1638022462.043:913): pid=10188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/535/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:14:22 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004028) [ 507.351830][ T38] audit: type=1804 audit(1638022462.363:914): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/813/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:14:22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:22 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:22 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="010090c90000000000aa8f8515684173ebc7", @ANYRESHEX=r2], 0x24}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000100)=""/75, &(0x7f0000000180)=0x4b) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r3, @ANYRESOCT], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 507.795093][ T38] audit: type=1804 audit(1638022462.813:915): pid=10201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/536/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 508.117639][ T38] audit: type=1804 audit(1638022463.133:916): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/813/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:14:23 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004029) [ 508.378539][ T38] audit: type=1804 audit(1638022463.393:917): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/814/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:14:23 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0xa4802, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:23 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 508.658971][ T38] audit: type=1804 audit(1638022463.673:918): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/537/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:14:23 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402a) [ 508.903140][ T38] audit: type=1804 audit(1638022463.913:919): pid=10217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/815/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:14:24 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="6626282b404bf7c2af56d0b06b9c2f3388b0bffdfeca7198c58e13d887010826d54b752ae2482062c0815561ca18c4a2fb9cf358a516", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c4) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendfile(r4, r2, 0x0, 0x175) [ 509.216725][ T38] audit: type=1804 audit(1638022464.233:920): pid=10221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/538/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:14:24 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000200000000000000dddcb375e37e93c96fc7eee8972ee47daff5062c1e4729b14b3d6fb4afe0dfbc964452d038b6c268d1d94b48df6d12707dcb7a6f79142d7833026452adea045d623170639e18509815aef0d6594a68d5404928657caeec8ca12d799a17c5f051cbeac00d8b1cc7d6d634467bdd9e774c5e5f1de06109eff202157a1a6e353b9145fe37113abef95bb4b9fd6b7660721ebc32e336c8965846ca565d790fa2995366c3b7ef1954aaac36a82eb8de2f2cdadb61975eb5d5f0d468c828845f2075f88fbb9a6907e184", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="46ff000000000000000c16ec3aa6eb0eb1fff54c19a5d7c76db7365629fa34c589b2457cb4b04d33e87c9cdd12e77683f949e8954109ce046af32bcb20517203eb9b18bd857fbd7e3bfb314a9ca22b388b333aad2487901fa4319afed261044752d5a1f54458c8d50a6b718b32792f2ce4dbf9c7c221d94093dde4c190095c024d58ff", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:24 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402b) 14:14:24 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:24 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:24 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402c) 14:14:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000001640)={0x0, 0xfb, 0x1060, 0x0, 0x1f, "0ddf784637b369c0f0fe7e9f75599c41", "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"}, 0xfffffffffffffedc, 0x3) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_open_pts(r1, 0x4102) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES16=r3, @ANYRESHEX, @ANYRES32, @ANYRESOCT], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 510.104313][T10241] mkiss: ax0: crc mode is auto. 14:14:25 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402d) 14:14:25 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000100), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)=""/21, 0x15}, {&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f00000002c0)=""/74, 0x4a}, {&(0x7f0000000340)=""/57, 0x39}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x2) ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f0000000500)={0x90, 0x8, &(0x7f00000004c0)="02a849820e5916a28040c1c05c7ffc702c72c263399f772f3818cb5febddbebdd1", {0x9, 0x8001, 0x41495043, 0x9, 0x6, 0x470f, 0x8, 0x20}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:25 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:25 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402e) 14:14:25 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1000, 0x5, &(0x7f0000000700)=[{&(0x7f0000000340)="091187ad7abe0f4dabcae8d1fe5d3ea924bd6e35ed56ec2e45d47a145dc4f98110b2455af33224a02ca33ce6acdeaf1a62d46f13b8fe98b7941927c722e73a957abed528621bef3463ac416e2244f6ca30416a915384a8fc66d4cacd1a03aac1a055f7cdf49299c5bf53b7a3bb6c909aece91774c0b277a7248e011c7fd9bde19bc82b863916765a5ce6f37bc4f6238d00fd87c61507e1afd127fd10a98d7f793bbb22997833ae389ae4b30462ceefd83203d519f08c1e9f4abdf4d318ff3ee0072df39d42c2a31de2edba486dbb345a845f5b", 0xd3, 0x1}, {&(0x7f00000004c0)="8a96f4a6189ef9aa41c4921390fb4021de35897e522ad15f01953f6bdd8228210c408643479e1a274a30b24ad8bc3dbd7f18c43e643b31a64b49a2f67370dc41f77892eb39b9d3448a53eafd6c9bff73c431ee6282967cffd347033cb532f94245bd266e9f0c9a5f449c867b61d1570c4960e0ee462673", 0x77, 0x2}, {&(0x7f0000000540)="c9b00006d297ebca45e1b5addf742c9eeb2863aa880690dff0269b0b6dd9207dbc1ec4204907321edad6c401cad5d87135f44e574af9172cac95b8248f13090e6bf70b486951c0dd0bfaacb3a6aa0ea69004a81fb9541f546056b6966068bb5486a2e0d456b0a65e517af592f0b09400331c6205dce8750d7236261667951a3ddce6b53b99553a2251a4f92ee797987d597e933b2ea25e91c0d45218843d1854763738fe65dbe2c6b797a7e45506b7421ccd431dbc206de9144fc4016eaf", 0xbe, 0x7}, {&(0x7f0000000440)="063156e5f69cb58666e68c7fd7b55ae848d01d1ed7", 0x15, 0x5}, {&(0x7f0000000600)="edbbad8e7d91c1b9b75f550fa218547b174d6099dfa2142608a5f52393cb09aec4736143d1c14f37fae6f664e1986c88b181fe6411410f87b417a204cba37173653cc06f8187a19235818e3e92794c21f90571fef82294f24aea7c00628d6c8b5dbb703f848e92ea81bd1a3f7f486dbaad662d8d601cf11e768c00384fa6747a5bd2c3226316bfa95823aa29f92d7ba83e459b40e64a924769eeb5456758b98f3539e2df99c911d59dbd602cddf07723d0617a32bce33a20d86b0f36c8466aa5578e3dc9ae1b9a4ce36dcb4c3375b239293c9bcd54b314c98db1977073a601ff11a15c1cfa00751708ec07c312ccc10f797b", 0xf2}], 0x20, &(0x7f0000000780)={[{@shortname_mixed}, {@shortname_mixed}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlate}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsdef={'smackfsdef', 0x3d, '$'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/controlC#\x00'}}, {@context={'context', 0x3d, 'staff_u'}}, {@dont_hash}]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x23}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff832d793d03000000f8", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 511.073474][T10260] loop2: detected capacity change from 0 to 8 14:14:26 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:26 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:26 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x0, 0x301, 0x0, 0x0, {0x5}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b6ccfdb69625"}]}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xdf30}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x48095) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:26 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402f) [ 511.591091][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 511.591110][ T38] audit: type=1804 audit(1638022466.603:931): pid=10274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/543/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 511.645372][ T38] audit: type=1804 audit(1638022466.623:932): pid=10273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/820/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 14:14:27 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004060) 14:14:27 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x44c00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'batadv\x00'}, {0x20, 'batadv\x00'}, {}, {0x20, '/dev/ptmx\x00'}, {0x20, '(@&\'!*}:%-('}, {0x20, '/dev/snd/controlC#\x00'}], 0xa, "88bf24934169d8ec80c0187f6c61ebca5c3d0a2b824dd8f614d6b6cb3756e3f858036cf438c624031a7f91fb8403a156ece7a28c7aa6b4c78d031f31f1ad4d9f9b37678b12884feae07fc5c0ed26a81821c7d7116d257b40997a48abc527ebf9b2912726a1a729e6a82de4f2350a121a5704dbecdf94c63ae5983fc7a3b9fe0e6535ebacb60176af3d3d3954cdd80d3f84d45eae89ad88be77998efa401689237b6d4043325ad40b197f6f93d7f132a890dbce02553340899776b753c754cff65b9c6a1fd2ade1532944017190b1b30237071b91c904d7a922ef8cac3cea717b79ae"}, 0x129) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 512.149570][ T38] audit: type=1804 audit(1638022467.163:933): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/821/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 14:14:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, 0x0, &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 512.336386][ T38] audit: type=1804 audit(1638022467.353:934): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/544/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:14:27 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000100)={0x98, 0x4, [0x0]}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:27 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004082) [ 512.861106][ T38] audit: type=1804 audit(1638022467.873:935): pid=10293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/545/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 512.904714][ T38] audit: type=1804 audit(1638022467.903:936): pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/822/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:28 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:28 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004087) 14:14:28 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, 0x0, &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 513.334966][ T38] audit: type=1804 audit(1638022468.353:937): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/823/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:28 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000140)={{}, 0x0, 0x10, @unused=[0xc2, 0x10001], @subvolid=0x7fff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000004c0)={{}, 0x0, 0x0, @unused=[0x81, 0x80, 0x3, 0x8001], @subvolid=0x2}) 14:14:28 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000040a8) [ 513.705343][ T38] audit: type=1804 audit(1638022468.723:938): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/546/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 513.784647][ T38] audit: type=1804 audit(1638022468.803:939): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/824/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 14:14:29 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, 0x0, &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:29 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000400", @ANYRES64=r4, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:29 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000040f1) [ 514.437441][ T38] audit: type=1804 audit(1638022469.453:940): pid=10316 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/547/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 14:14:29 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1000040f2) 14:14:29 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:29 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0xb00000000065808, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x42, {0x2, 0x4e23, @rand_addr=0x64010100}, 'ip6tnl0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c9000000000000fcff000008000300d78936c3f307868485e8a255874709d0ed13622ec8929110e2f7feed3c8e96946eaf2f6c8baaa8c04b414c3e44ef094c56b57a1acfbc255130363d7c7061cf66a5886ac29d17c195fb13d9a8bb0e0463694ced564df581f1af61235be03dbd75833bcaf50f3ac81f6dfa5866873ace9ddd", @ANYRES32], 0x24}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:30 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:30 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100007000) 14:14:30 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:30 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x1010, r0, 0x7f806000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000400", @ANYRES16=r3, @ANYBLOB="014fb2278041d49656120e2d5b585a0090c900000000000005eeffff07000300", @ANYRES32], 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) dup(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0xfffffffffffffe9b, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYBLOB="46040000", @ANYRES64, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:31 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:31 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x1ffffefff) [ 516.649166][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 516.649204][ T38] audit: type=1804 audit(1638022471.663:946): pid=10346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/549/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 516.787233][ T38] audit: type=1804 audit(1638022471.793:947): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/549/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 516.847595][ T38] audit: type=1800 audit(1638022471.843:948): pid=10346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1162 res=0 errno=0 14:14:31 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 516.915300][ T38] audit: type=1800 audit(1638022471.843:949): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1162 res=0 errno=0 14:14:32 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:32 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:32 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x9, 0x3, 0x4, 0x10000, 0x3, {0x77359400, 0x0}, {0x3, 0x2, 0x40, 0x3d, 0x1, 0x3f, "00ef00e2"}, 0x2, 0x3, @userptr=0x4, 0x7ff, 0x0, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES64, @ANYBLOB="f4c8a434e2610697fb336f259d1c04fe9b4919e71b9ac8354bb1b7abd438bc0b73b1f6351dd796aa05263cf9464da4c43f6e985272ea5d00e6d54cbdeb21", @ANYRESHEX=r1, @ANYRESDEC=r1], 0x24}}, 0x2000001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="7a784364c6020ba0a7f947b9c930dadeacc3ea", @ANYRESHEX, @ANYRES32], 0x4}}, 0x94) sendfile(r4, r3, 0x0, 0x100004000) [ 517.308842][ T38] audit: type=1804 audit(1638022472.323:950): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/550/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 14:14:32 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 517.741491][ T38] audit: type=1804 audit(1638022472.753:951): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/551/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 14:14:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:32 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:33 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:33 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYBLOB="4604c50000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 518.400081][ T38] audit: type=1804 audit(1638022473.413:952): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/552/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 518.462249][ T38] audit: type=1804 audit(1638022473.423:953): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/830/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 14:14:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:33 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:34 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:34 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x4, 0x20800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x1d8, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x64}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xdc, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0xdc}}, 0x20000) [ 519.208744][ T38] audit: type=1804 audit(1638022474.223:954): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/553/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 519.267689][ T38] audit: type=1804 audit(1638022474.283:955): pid=10390 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/831/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:14:34 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:34 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090020000000cecf8a06a0000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="bfea7e42ab88593e0000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:34 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:34 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000140)={{}, 0x0, 0x10, @unused=[0xc2, 0x10001], @subvolid=0x7fff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000004c0)={{}, 0x0, 0x0, @unused=[0x81, 0x80, 0x3, 0x8001], @subvolid=0x2}) 14:14:35 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040010", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x80, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4021}, 0x4000001) sendfile(r2, r1, 0x0, 0x100004000) 14:14:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:35 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x40, 0x5, 0x1, 0x0, 0x100, 0x2221, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x4, @perf_bp={&(0x7f00000002c0), 0x8}, 0x480, 0x1ff, 0x1ff, 0x7, 0x1ff, 0xd57c, 0x6, 0x0, 0x401, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003c962d146499c5b31ff71783767883333c174221dde0e96d1ea1af00682288e2288306096bd6b8d9809016baf314bbda51e2b729e13337687a39474adb14a2097aa4697888d44e57246d47b3d5c635131db548367ed1033c711ba70d089c9e56f20c0b08bcbf0a872ac74c2f473c5517680ec167234a21fdce81092"], 0x24}}, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) ioctl$CDROM_SEND_PACKET(r5, 0x5393, &(0x7f0000000240)={"0564feff5b5f00415a6c2182", &(0x7f00000004c0)="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", 0x1000, 0x1000, &(0x7f0000000140)={0x8, 0x1, 0xf7, 0x3, 0x0, 0x0, 0x0, "9aa08db3", 0x8, "0879d892", 0x15, 0x0, 0x3, "6be7e6", "27be42034c9d0c14cec69dd5abd43e502ae640769accf1f13eca509e3e23081cb57a3f02c858c676557506a3b8d5"}, 0x3, 0x2, 0x8, &(0x7f0000000180)}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="04e56b90ba0000", @ANYRESOCT=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x10000402d) 14:14:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESDEC, @ANYRESHEX=r3], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000000000000", @ANYRES32=r8], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100004000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000540)={{0x7, 0x0, 0xffffff81, 0x5, 'syz0\x00', 0xffffffff}, 0x0, [0x8, 0x8, 0x9, 0x0, 0x1, 0x1839, 0x6, 0xfff, 0x1, 0xc00000000, 0x8, 0x9, 0x79, 0x3, 0xc0, 0xa8, 0x1ff, 0x401, 0x8, 0x27, 0x8, 0x8001, 0x2, 0x83e1, 0xfffffffffffffffa, 0x4, 0x78, 0x2, 0x0, 0x5, 0x3, 0x8, 0x81, 0x1, 0x2, 0x40, 0xc60, 0x2, 0x7e, 0x10000, 0xe6f, 0x7fff, 0x2, 0x5, 0x0, 0x400, 0x9, 0x4c, 0x400, 0x10001, 0x1, 0xffffffff, 0x1, 0x4, 0x91, 0x1ff, 0x1, 0x6, 0x63, 0x8, 0x8, 0x5, 0x0, 0x6ac, 0x7, 0x1, 0x8, 0x8, 0x669, 0x1, 0xe73, 0x8000, 0x2, 0xffc0000, 0x3, 0xfffffffffffffffa, 0x3, 0x80000000, 0x3, 0x100, 0x10000, 0x6, 0xfff, 0x100000000, 0x7fff, 0x1000, 0x0, 0x1, 0x8001, 0x3cc, 0x4000000000000, 0x6486, 0x80000000, 0x7, 0x10000, 0x1, 0x31, 0x200, 0x0, 0x800, 0x0, 0x0, 0x5, 0x3, 0x4, 0x9, 0x1, 0x5, 0x7, 0x5, 0x9, 0x1, 0x6, 0xffffffffffff07e5, 0x3, 0x3, 0x1, 0x1, 0x1, 0x2, 0xffff, 0x7, 0x81, 0x9, 0x1, 0xef2, 0x7fff, 0x8]}) 14:14:36 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 521.745499][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 521.745516][ T38] audit: type=1804 audit(1638022476.763:960): pid=10430 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/835/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 14:14:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:36 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0xa4802, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x0, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 522.134136][ T38] audit: type=1804 audit(1638022477.153:961): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/557/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 14:14:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x0, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:37 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:37 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0e000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) syz_open_pts(r4, 0x82000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x0, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 522.673711][ T38] audit: type=1804 audit(1638022477.683:962): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/836/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 14:14:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:37 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="010090c90000000000aa8f8515684173ebc7", @ANYRESHEX=r2], 0x24}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000100)=""/75, &(0x7f0000000180)=0x4b) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r3, @ANYRESOCT], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:38 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = pidfd_getfd(r4, r1, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 523.159364][ T38] audit: type=1804 audit(1638022478.173:963): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir334071680/syzkaller.CmdDBF/558/cgroup.controllers" dev="sda1" ino=1152 res=1 errno=0 [ 523.212560][ T38] audit: type=1804 audit(1638022478.173:964): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/837/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 14:14:38 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04de"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:38 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f00000009c0)={{0x2, 0x0, 0x0, 0x40, 'syz0\x00', 0xb0d2}, 0x0, [0x9000000, 0x0, 0x5, 0x3, 0x52, 0x100, 0x200000000000009, 0x2, 0x101, 0x7, 0x8, 0x8, 0x9, 0x4, 0x2, 0x80, 0x10001, 0x6, 0x5755, 0x6, 0x5, 0xd86, 0x1, 0x7ff, 0xc4, 0x3f, 0x3, 0x4, 0x7, 0xfbd, 0x9, 0x3, 0x5c1a, 0xba8d, 0xe1f, 0x5, 0x5, 0x400, 0x9, 0x8001, 0x6, 0x0, 0x3, 0xfd, 0x1, 0x800, 0x3, 0x80000002, 0x2405, 0x5, 0x0, 0x5, 0x823f, 0x5, 0xffffffff, 0x101, 0x8, 0x1aa, 0x7bd8, 0x3, 0x80, 0x6, 0x7eb3949b, 0x5, 0x7fffffff, 0x40, 0x7fff, 0x4, 0x80000000, 0x2000, 0x7, 0x40, 0x400000000, 0xfff, 0x9, 0x2, 0x40, 0xcd, 0x6de, 0x100, 0x0, 0x6, 0xb30, 0x9, 0x4, 0xe6, 0x3, 0x9, 0x1ff, 0x2ea, 0x7f, 0x0, 0x9, 0x7, 0x8, 0x1, 0x200000000005, 0x9, 0x0, 0x4f16, 0xff, 0x4, 0x3834, 0xeb, 0x4000000000003, 0x6, 0x73a2, 0xbc24, 0x0, 0x6, 0x5, 0x80, 0x8, 0x20, 0xa98, 0xb, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0x7d93, 0x7, 0x20, 0x2, 0x7, 0xc0, 0x4a, 0x200]}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="1cc06eeb28010090c9050000000000000050dcc440058cfcd84193b7613fa49046832a9962a3863e9764f2edd7433255aa34c1fbe5e2194a87741611c6512f0d76cb791f6fdb0abcae5b5ba557e3a5a15ec2301f840c27019a249e96d3a7f0ea03396030e613453bf003cc92d7335c0391f4d70827408a2cf39389b186fbbdfcca2944cdb13d319d22aa87e70502c6ef3342598191c937f3bbb5d4b4af20c1ccaf90371b27f60c593cba8b554288f7c9f8147d8c7d1d"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000540)=ANY=[@ANYBLOB="45bedc316924d135f42a8a51b694f90176bfb4df0f089ddc2f219892af754266486d445c0fabe76b51641fec6ec7d658a889cad9a1232cea3c1be81514c7b644b4a4e23f5abe2304f159e3fd125733c0036b4cc275d3c11751ca593841c9ee58f5e8ab26f073055297a85419a50c06f5c6d8d0fce5b21977a0916141411d4b53c9661106ace920a72d26f3ef9e53e9f94ef469ab3c11f5d1b2c939f5e079a48f2418bfc440fa6ffb7a3e556c330de19b0000bbdfb65a77ec6519c381dcb701c12b9047f3812d000000000000dbecb21158bdb6b90caa7ade1715523917f5297d47ef6ff88c7c92d11be49688a258df4177e6de5eec26e47ab794a6a0ad12f390bc98cc787f699aae8e691bc6446f83241421ac2763bd88ba7341866079569e05ab335b629074e19f1f82f6a8dcb22a7610905746cf8ca52cc356505129099798193f13b8d76caa03d6b3b464d0485d067782f5c6b8a28854b6e9e5fc07fc3c1f4ff2eaefd81888a866dadab4712690d91b02e47f23083b518e2fad0cbda22842c2b3b517c50bf717063abc5e08dca0b0eb3cfea1a88b5dcdbeef99bd34935f778aa5f28f0381620e832b0b00160403b0ecbe6ccb198a3e75e1384b4f14ae7b4e5256452626ebbbe6fbf81152b89273a5a37a7a0fa3b1dda93f394fed0d", @ANYRES64, @ANYRESHEX=r4, @ANYRESOCT=r5, @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES64], 0x4}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) 14:14:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 523.892040][ T38] audit: type=1804 audit(1638022478.903:965): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/838/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 14:14:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0xffffffffffffff4d) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0x8, 0x1000, 0xf89, 0x1, 0x12, "cee8611dbafccc59db853c5d3569b375e8f708"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) lstat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000140)) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) listen(r2, 0x1000) pipe(&(0x7f0000000100)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240004008eeb28ac80007f87c091d7af6b3eb7144506b9ec582024b3a0ee8223601f8752f7dfa11bd5b204cb07000000000000009f5dff4843cefb3162611db6dece4086111c994a43f093d81c81b1d134628818955840adbbdad750fff566dcd2ed6d5b6865ee709bebadfd8f0be7371209a84fbccdbe6c9809bbec681df4572b3cc4646a1808c74442cca26b275bd962bca47df61a2d", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000000000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100004000) 14:14:39 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 524.522243][ T38] audit: type=1804 audit(1638022479.533:966): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/839/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0 14:14:39 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, 0x0, 0x0, 0x0) 14:14:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, 0x0, 0x0, 0x0) [ 524.982774][ T38] audit: type=1400 audit(1638022479.983:967): avc: denied { listen } for pid=10496 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 14:14:40 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x6469, 0x400040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 525.194561][ T38] audit: type=1804 audit(1638022480.213:968): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/840/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0 14:14:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, 0x0, 0x0, 0x0) [ 525.414521][ T3777] Bluetooth: hci1: command 0x0406 tx timeout 14:14:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200), 0x0, 0x0) 14:14:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200), 0x0, 0x0) 14:14:40 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200), 0x0, 0x0) 14:14:40 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYRESDEC=r0], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:40 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004017) [ 526.035686][ T38] audit: type=1804 audit(1638022481.053:969): pid=10537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/841/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 14:14:41 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:41 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c90000000000000500000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) 14:14:41 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004006) 14:14:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="012000000000000000000600000006000b00150000006d0e5890aa29402408d705de2f00eaa824a39f5de2ab0d0af1146a071957147e6dafb7418eba20b21a4752aca27fca2cd15a96e3fece6b0e0edead4edc67fdf3745268f45c787d234a219d222436b76d85ba9203818854a909f2783629fcc937725e4168c729c7d54148f11189a1804c0031469c7ef5e0864399c8c3e08521956a1c25372f42eddbe8af5d33a23fbf2b"], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040080) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c9080000000005000000080003009e252a61f42067e5450a4fa422a234935aee7fe2d5e1331c3ce67f96b1aca0d3d366f5639eafbdd914a582926bda3c847a12f27cb6dd527d4590198e43"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100004000) [ 526.839109][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 526.839128][ T38] audit: type=1804 audit(1638022481.853:975): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/842/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 14:14:42 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r1}, 0x20) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:42 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) (fail_nth: 1) [ 527.233569][T10559] FAULT_INJECTION: forcing a failure. [ 527.233569][T10559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.261034][T10559] CPU: 2 PID: 10559 Comm: syz-executor.2 Not tainted 5.16.0-rc2-syzkaller #0 [ 527.273317][T10559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 527.285551][T10559] Call Trace: [ 527.290747][T10559] [ 527.294231][T10559] dump_stack_lvl+0xcd/0x134 [ 527.299804][T10559] should_fail.cold+0x5/0xa [ 527.305769][T10559] _copy_from_user+0x2c/0x180 [ 527.310882][T10559] __copy_msghdr_from_user+0x91/0x4b0 [ 527.319400][T10559] ? __ia32_sys_shutdown+0x70/0x70 [ 527.327641][T10559] ? mark_lock+0xef/0x17b0 [ 527.336350][T10559] ? lock_chain_count+0x20/0x20 [ 527.343990][T10559] sendmsg_copy_msghdr+0xa1/0x160 [ 527.350153][T10559] ? do_recvmmsg+0x6d0/0x6d0 [ 527.355879][T10559] ? lock_chain_count+0x20/0x20 [ 527.362223][T10559] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 527.370183][T10559] ___sys_sendmsg+0xc6/0x170 [ 527.375915][T10559] ? sendmsg_copy_msghdr+0x160/0x160 [ 527.382643][T10559] ? __fget_files+0x21b/0x3e0 [ 527.388986][T10559] ? lock_downgrade+0x6e0/0x6e0 [ 527.396418][T10559] ? __fget_files+0x23d/0x3e0 [ 527.402614][T10559] ? __fget_light+0xea/0x280 [ 527.410384][T10559] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 527.418920][T10559] __sys_sendmmsg+0x195/0x470 [ 527.427062][T10559] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 527.435684][T10559] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 527.443232][T10559] ? find_held_lock+0x2d/0x110 [ 527.451064][T10559] ? __context_tracking_exit+0xb8/0xe0 [ 527.460459][T10559] ? lock_downgrade+0x6e0/0x6e0 [ 527.468239][T10559] ? lock_downgrade+0x6e0/0x6e0 [ 527.477351][T10559] __x64_sys_sendmmsg+0x99/0x100 [ 527.487150][T10559] ? syscall_enter_from_user_mode+0x21/0x70 [ 527.497485][T10559] do_syscall_64+0x35/0xb0 [ 527.504258][T10559] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 527.513484][T10559] RIP: 0033:0x7f63e7eb9ae9 [ 527.519771][T10559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 527.545097][T10559] RSP: 002b:00007f63e542f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 527.556916][T10559] RAX: ffffffffffffffda RBX: 00007f63e7fccf60 RCX: 00007f63e7eb9ae9 [ 527.570474][T10559] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000006 [ 527.582487][T10559] RBP: 00007f63e542f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 527.592846][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.603572][T10559] R13: 00007ffcc536d52f R14: 00007f63e542f300 R15: 0000000000022000 [ 527.614515][T10559] 14:14:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) (fail_nth: 2) 14:14:42 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/165, 0xa5}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/223, 0xdf}, {&(0x7f00000016c0)=""/81, 0x51}, {&(0x7f0000001740)=""/91, 0x5b}, {&(0x7f00000017c0)=""/152, 0x98}], 0xa, &(0x7f0000001940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfd5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40044) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 527.759731][T10564] FAULT_INJECTION: forcing a failure. [ 527.759731][T10564] name failslab, interval 1, probability 0, space 0, times 0 [ 527.776440][T10564] CPU: 3 PID: 10564 Comm: syz-executor.2 Not tainted 5.16.0-rc2-syzkaller #0 [ 527.788928][T10564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 527.801607][T10564] Call Trace: [ 527.807037][T10564] [ 527.812251][T10564] dump_stack_lvl+0xcd/0x134 [ 527.818606][T10564] should_fail.cold+0x5/0xa [ 527.824812][T10564] should_failslab+0x5/0x10 [ 527.830792][T10564] kmem_cache_alloc_node+0x68/0x590 [ 527.837978][T10564] __alloc_skb+0x215/0x340 [ 527.843521][T10564] alloc_skb_with_frags+0x93/0x620 [ 527.850775][T10564] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 527.861210][T10564] sock_alloc_send_pskb+0x783/0x910 [ 527.868315][T10564] ? sock_wmalloc+0x120/0x120 [ 527.874640][T10564] ? lock_downgrade+0x6e0/0x6e0 [ 527.880214][T10564] ? do_raw_spin_lock+0x120/0x2b0 [ 527.886214][T10564] ? rwlock_bug.part.0+0x90/0x90 [ 527.891916][T10564] unix_dgram_sendmsg+0x3ec/0x1950 [ 527.898667][T10564] ? tomoyo_socket_sendmsg_permission+0x130/0x3a0 [ 527.907637][T10564] ? tomoyo_socket_bind_permission+0x330/0x330 [ 527.917787][T10564] ? unix_stream_sendpage+0xca0/0xca0 [ 527.925012][T10564] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 527.932344][T10564] ? unix_stream_sendpage+0xca0/0xca0 [ 527.939505][T10564] sock_sendmsg+0xcf/0x120 [ 527.945352][T10564] ____sys_sendmsg+0x331/0x810 [ 527.952087][T10564] ? kernel_sendmsg+0x50/0x50 14:14:42 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1801, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x16000}]) r5 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@netrom, @default, @null, @rose, @null, @bcast, @netrom, @netrom]}, &(0x7f0000000080)=0x48, 0x0) kcmp(0x0, 0x0, 0x0, r5, 0xffffffffffffffff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r6, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0xb, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r7 = accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x6, r7, &(0x7f00000001c0)="582396cfae6dffaa103f75563f3499eba234364cbeb636470e2a038b125fd2d509c1ec722ef64dede620e50dfa5810327b1f542c477d7cf6992029a2cabd5c5a6ebd5ef8d5c11b02ce1ac75a1103f74e28eb053396ba8a75296fcacda1c583baf7d3aad5f4c14d4acb449462e92710db378768994b709dcf2b5b9348d8b5831fd94180ffd71ec758eb8068d4660e5ef05a9c6a58d8ffb0e28105ede0cb4dcf0e8f00e831a4e983f32f319cea9bc95272", 0xb0, 0x4, 0x0, 0x2}]) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3de2d17fa4e9969f, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0xb, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 527.957987][T10564] ? do_recvmmsg+0x6d0/0x6d0 [ 527.964117][T10564] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 527.974949][T10564] ___sys_sendmsg+0xf3/0x170 [ 527.983536][T10564] ? sendmsg_copy_msghdr+0x160/0x160 [ 527.990896][T10564] ? __fget_files+0x21b/0x3e0 [ 527.996340][T10564] ? lock_downgrade+0x6e0/0x6e0 [ 528.004355][T10564] ? __fget_files+0x23d/0x3e0 [ 528.009621][T10564] ? __fget_light+0xea/0x280 [ 528.014352][T10564] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 528.022408][T10564] __sys_sendmmsg+0x195/0x470 [ 528.029434][T10564] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 528.035367][T10564] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 528.043272][T10564] ? find_held_lock+0x2d/0x110 14:14:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 528.049087][T10564] ? __context_tracking_exit+0xb8/0xe0 [ 528.057017][T10564] ? lock_downgrade+0x6e0/0x6e0 [ 528.063304][T10564] ? lock_downgrade+0x6e0/0x6e0 [ 528.070339][T10564] __x64_sys_sendmmsg+0x99/0x100 [ 528.076733][T10564] ? syscall_enter_from_user_mode+0x21/0x70 [ 528.084316][T10564] do_syscall_64+0x35/0xb0 [ 528.087803][ T38] audit: type=1804 audit(1638022483.103:976): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/843/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 528.090073][T10564] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 528.090121][T10564] RIP: 0033:0x7f63e7eb9ae9 [ 528.090142][T10564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.090170][T10564] RSP: 002b:00007f63e542f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 528.177491][T10564] RAX: ffffffffffffffda RBX: 00007f63e7fccf60 RCX: 00007f63e7eb9ae9 [ 528.187437][T10564] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000006 [ 528.197653][T10564] RBP: 00007f63e542f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 528.208538][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.222934][T10564] R13: 00007ffcc536d52f R14: 00007f63e542f300 R15: 0000000000022000 [ 528.224628][ T38] audit: type=1800 audit(1638022483.233:977): pid=10573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 528.240330][T10564] [ 528.284018][ T38] audit: type=1400 audit(1638022483.293:978): avc: denied { create } for pid=10570 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 14:14:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) (fail_nth: 3) [ 528.335585][ T38] audit: type=1800 audit(1638022483.293:979): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 528.398571][T10577] FAULT_INJECTION: forcing a failure. [ 528.398571][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 528.419029][T10577] CPU: 2 PID: 10577 Comm: syz-executor.2 Not tainted 5.16.0-rc2-syzkaller #0 [ 528.430788][T10577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 528.440656][T10577] Call Trace: [ 528.444365][T10577] [ 528.448100][T10577] dump_stack_lvl+0xcd/0x134 [ 528.455846][T10577] should_fail.cold+0x5/0xa [ 528.461624][T10577] should_failslab+0x5/0x10 [ 528.467137][T10577] kmem_cache_alloc_node_trace+0x69/0x5b0 [ 528.479533][T10577] ? rcu_read_lock_sched_held+0x3a/0x70 [ 528.487325][T10577] __kmalloc_node_track_caller+0x38/0x60 [ 528.495301][T10577] __alloc_skb+0xde/0x340 [ 528.501488][T10577] alloc_skb_with_frags+0x93/0x620 [ 528.508342][T10577] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 528.515442][T10577] sock_alloc_send_pskb+0x783/0x910 [ 528.522162][T10577] ? sock_wmalloc+0x120/0x120 [ 528.529194][T10577] ? lock_downgrade+0x6e0/0x6e0 [ 528.535442][T10577] ? do_raw_spin_lock+0x120/0x2b0 [ 528.544386][T10577] ? rwlock_bug.part.0+0x90/0x90 [ 528.551455][T10577] unix_dgram_sendmsg+0x3ec/0x1950 [ 528.558182][T10577] ? tomoyo_socket_sendmsg_permission+0x130/0x3a0 [ 528.566766][T10577] ? tomoyo_socket_bind_permission+0x330/0x330 [ 528.574921][T10577] ? unix_stream_sendpage+0xca0/0xca0 [ 528.581492][T10577] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 528.591791][T10577] ? unix_stream_sendpage+0xca0/0xca0 [ 528.598382][T10577] sock_sendmsg+0xcf/0x120 [ 528.604375][T10577] ____sys_sendmsg+0x331/0x810 [ 528.611190][T10577] ? kernel_sendmsg+0x50/0x50 [ 528.617173][T10577] ? do_recvmmsg+0x6d0/0x6d0 [ 528.623461][T10577] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 528.631706][T10577] ___sys_sendmsg+0xf3/0x170 [ 528.637253][T10577] ? sendmsg_copy_msghdr+0x160/0x160 [ 528.644295][T10577] ? __fget_files+0x21b/0x3e0 [ 528.649854][T10577] ? lock_downgrade+0x6e0/0x6e0 [ 528.654914][T10577] ? __fget_files+0x23d/0x3e0 [ 528.661269][T10577] ? __fget_light+0xea/0x280 [ 528.667424][T10577] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 528.675299][T10577] __sys_sendmmsg+0x195/0x470 [ 528.681614][T10577] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 528.688745][T10577] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 528.697973][T10577] ? find_held_lock+0x2d/0x110 [ 528.704962][T10577] ? __context_tracking_exit+0xb8/0xe0 [ 528.714501][T10577] ? lock_downgrade+0x6e0/0x6e0 [ 528.721909][T10577] ? lock_downgrade+0x6e0/0x6e0 [ 528.728798][T10577] __x64_sys_sendmmsg+0x99/0x100 [ 528.735583][T10577] ? syscall_enter_from_user_mode+0x21/0x70 [ 528.743264][T10577] do_syscall_64+0x35/0xb0 [ 528.749390][T10577] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 528.757617][T10577] RIP: 0033:0x7f63e7eb9ae9 [ 528.763876][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.787994][T10577] RSP: 002b:00007f63e542f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 528.798832][T10577] RAX: ffffffffffffffda RBX: 00007f63e7fccf60 RCX: 00007f63e7eb9ae9 [ 528.808665][T10577] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000006 [ 528.818460][T10577] RBP: 00007f63e542f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 528.828227][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.838023][T10577] R13: 00007ffcc536d52f R14: 00007f63e542f300 R15: 0000000000022000 [ 528.849200][T10577] [ 528.887072][ T38] audit: type=1804 audit(1638022483.903:980): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/843/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 14:14:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) (fail_nth: 4) [ 528.987993][T10580] FAULT_INJECTION: forcing a failure. [ 528.987993][T10580] name failslab, interval 1, probability 0, space 0, times 0 14:14:44 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = fanotify_init(0x1, 0x1) tee(r2, r1, 0x5, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x40044894}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xa, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map={0x18, 0x5}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x1, 0x5, 0xb, 0x0, 0x1, 0xffffffffffffffff}, @generic={0x6, 0x8, 0x4, 0x3f, 0x63c}], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xd, 0x6, 0x5}, 0x10}, 0x78) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100004000) [ 529.030080][T10580] CPU: 1 PID: 10580 Comm: syz-executor.2 Not tainted 5.16.0-rc2-syzkaller #0 [ 529.040710][T10580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 529.051390][T10580] Call Trace: [ 529.055758][T10580] [ 529.059996][T10580] dump_stack_lvl+0xcd/0x134 [ 529.066058][T10580] should_fail.cold+0x5/0xa [ 529.071124][T10580] ? unix_compat_ioctl+0x30/0x30 [ 529.076845][T10580] should_failslab+0x5/0x10 [ 529.082312][T10580] kmem_cache_alloc+0x5d/0x560 [ 529.087722][T10580] skb_clone+0x170/0x3c0 [ 529.092901][T10580] sk_psock_verdict_recv+0x72/0x780 [ 529.099052][T10580] unix_read_sock+0xd7/0x250 [ 529.104444][T10580] ? sk_psock_strp_read+0x6a0/0x6a0 [ 529.110223][T10580] ? unix_compat_ioctl+0x30/0x30 [ 529.115781][T10580] ? find_held_lock+0x2d/0x110 [ 529.121119][T10580] ? unix_compat_ioctl+0x30/0x30 [ 529.126738][T10580] sk_psock_verdict_data_ready+0x11a/0x180 [ 529.133403][T10580] ? sk_psock_strp_read_done+0x10/0x10 [ 529.139879][T10580] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 529.146388][T10580] ? do_raw_spin_unlock+0x171/0x230 [ 529.152000][T10580] unix_dgram_sendmsg+0xfa7/0x1950 [ 529.157792][T10580] ? unix_stream_sendpage+0xca0/0xca0 [ 529.163807][T10580] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 529.171059][T10580] ? unix_stream_sendpage+0xca0/0xca0 [ 529.177380][T10580] sock_sendmsg+0xcf/0x120 [ 529.182331][T10580] ____sys_sendmsg+0x331/0x810 [ 529.187661][T10580] ? kernel_sendmsg+0x50/0x50 [ 529.193499][T10580] ? do_recvmmsg+0x6d0/0x6d0 [ 529.198795][T10580] ? lockdep_hardirqs_on_prepare+0x400/0x400 14:14:44 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1801, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x16000}]) r5 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @rose}, [@netrom, @default, @null, @rose, @null, @bcast, @netrom, @netrom]}, &(0x7f0000000080)=0x48, 0x0) kcmp(0x0, 0x0, 0x0, r5, 0xffffffffffffffff) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r6, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0xb, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r7 = accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x6, r7, &(0x7f00000001c0)="582396cfae6dffaa103f75563f3499eba234364cbeb636470e2a038b125fd2d509c1ec722ef64dede620e50dfa5810327b1f542c477d7cf6992029a2cabd5c5a6ebd5ef8d5c11b02ce1ac75a1103f74e28eb053396ba8a75296fcacda1c583baf7d3aad5f4c14d4acb449462e92710db378768994b709dcf2b5b9348d8b5831fd94180ffd71ec758eb8068d4660e5ef05a9c6a58d8ffb0e28105ede0cb4dcf0e8f00e831a4e983f32f319cea9bc95272", 0xb0, 0x4, 0x0, 0x2}]) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3de2d17fa4e9969f, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0xb, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 529.205985][T10580] ___sys_sendmsg+0xf3/0x170 [ 529.211804][T10580] ? sendmsg_copy_msghdr+0x160/0x160 [ 529.219046][T10580] ? __fget_files+0x21b/0x3e0 [ 529.224782][T10580] ? lock_downgrade+0x6e0/0x6e0 [ 529.231205][T10580] ? __fget_files+0x23d/0x3e0 [ 529.236452][T10580] ? __fget_light+0xea/0x280 14:14:44 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) [ 529.241779][T10580] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 529.249246][T10580] __sys_sendmmsg+0x195/0x470 [ 529.254580][T10580] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 529.260798][T10580] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 529.268859][T10580] ? find_held_lock+0x2d/0x110 [ 529.274961][T10580] ? __context_tracking_exit+0xb8/0xe0 [ 529.282284][T10580] ? lock_downgrade+0x6e0/0x6e0 [ 529.288036][T10580] ? lock_downgrade+0x6e0/0x6e0 [ 529.294448][T10580] __x64_sys_sendmmsg+0x99/0x100 [ 529.299977][T10580] ? syscall_enter_from_user_mode+0x21/0x70 [ 529.306078][T10580] do_syscall_64+0x35/0xb0 [ 529.311387][T10580] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 529.319856][T10580] RIP: 0033:0x7f63e7eb9ae9 [ 529.325202][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 529.349490][T10580] RSP: 002b:00007f63e542f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 529.360332][T10580] RAX: ffffffffffffffda RBX: 00007f63e7fccf60 RCX: 00007f63e7eb9ae9 [ 529.372290][T10580] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000006 [ 529.382582][T10580] RBP: 00007f63e542f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 529.394254][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.405530][T10580] R13: 00007ffcc536d52f R14: 00007f63e542f300 R15: 0000000000022000 [ 529.417846][T10580] [ 529.425205][ T38] audit: type=1800 audit(1638022484.043:981): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1164 res=0 errno=0 [ 529.481012][ T38] audit: type=1800 audit(1638022484.493:982): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1164 res=0 errno=0 14:14:44 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x1, 0xcc, 0x1, 0x0, 0xad, 0xd9, 0x60, 0x6, 0x20080000, 0xfffffd2d, 0x6, 0x2, 0x4, 0xfffffffd, 0x6, 0x20, {0xffff, 0xb5e5}, 0xfb, 0xd2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000100)={0x5, 0xfffffffffffffe00, 0x5, 0x7fff, 0xc40}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000180)=ANY=[@ANYBLOB="260400001e1fc5a79dbc98f4d22a68eefb308b8f942af1d1f4b893ab9090", @ANYRES16=r4, @ANYBLOB="ff830500000000000000", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100004000) 14:14:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) (fail_nth: 5) [ 529.638050][T10595] FAULT_INJECTION: forcing a failure. [ 529.638050][T10595] name failslab, interval 1, probability 0, space 0, times 0 [ 529.657417][T10595] CPU: 0 PID: 10595 Comm: syz-executor.2 Not tainted 5.16.0-rc2-syzkaller #0 [ 529.669146][T10595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 529.680680][T10595] Call Trace: [ 529.684920][T10595] [ 529.688404][T10595] dump_stack_lvl+0xcd/0x134 [ 529.694543][T10595] should_fail.cold+0x5/0xa [ 529.700741][T10595] should_failslab+0x5/0x10 [ 529.706699][T10595] kmem_cache_alloc_trace+0x5c/0x4a0 [ 529.713916][T10595] sk_psock_skb_ingress_self+0x55/0x3b0 [ 529.720799][ T38] audit: type=1804 audit(1638022484.733:983): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir202867378/syzkaller.XthT5R/845/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 529.721350][T10595] sk_psock_verdict_apply+0x424/0x540 [ 529.721419][T10595] sk_psock_verdict_recv+0x2b0/0x780 [ 529.721449][T10595] unix_read_sock+0xd7/0x250 [ 529.721477][T10595] ? sk_psock_strp_read+0x6a0/0x6a0 [ 529.785890][T10595] ? unix_compat_ioctl+0x30/0x30 [ 529.792290][T10595] ? find_held_lock+0x2d/0x110 [ 529.798865][T10595] ? unix_compat_ioctl+0x30/0x30 [ 529.806083][T10595] sk_psock_verdict_data_ready+0x11a/0x180 [ 529.813826][T10595] ? sk_psock_strp_read_done+0x10/0x10 [ 529.824265][T10595] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 529.832962][T10595] ? do_raw_spin_unlock+0x171/0x230 [ 529.839389][ T38] audit: type=1400 audit(1638022484.733:984): avc: denied { ioctl } for pid=10592 comm="syz-executor.3" path="/dev/video1" dev="devtmpfs" ino=870 ioctlcmd=0x5658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 529.841786][T10595] unix_dgram_sendmsg+0xfa7/0x1950 [ 529.882817][T10595] ? unix_stream_sendpage+0xca0/0xca0 [ 529.890550][T10595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 529.899957][T10595] ? unix_stream_sendpage+0xca0/0xca0 [ 529.908355][T10595] sock_sendmsg+0xcf/0x120 [ 529.916571][T10595] ____sys_sendmsg+0x331/0x810 [ 529.923995][T10595] ? kernel_sendmsg+0x50/0x50 [ 529.930536][T10595] ? do_recvmmsg+0x6d0/0x6d0 [ 529.936521][T10595] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 529.944357][T10595] ___sys_sendmsg+0xf3/0x170 [ 529.951408][T10595] ? sendmsg_copy_msghdr+0x160/0x160 [ 529.958235][T10595] ? __fget_files+0x21b/0x3e0 [ 529.964815][T10595] ? lock_downgrade+0x6e0/0x6e0 [ 529.972004][T10595] ? __fget_files+0x23d/0x3e0 [ 529.979245][T10595] ? __fget_light+0xea/0x280 [ 529.986038][T10595] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 529.994521][T10595] __sys_sendmmsg+0x195/0x470 [ 530.001776][T10595] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 530.009281][T10595] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 530.018669][T10595] ? find_held_lock+0x2d/0x110 [ 530.025961][T10595] ? __context_tracking_exit+0xb8/0xe0 [ 530.032604][T10595] ? lock_downgrade+0x6e0/0x6e0 [ 530.040985][T10595] ? lock_downgrade+0x6e0/0x6e0 [ 530.049946][T10595] __x64_sys_sendmmsg+0x99/0x100 [ 530.057160][T10595] ? syscall_enter_from_user_mode+0x21/0x70 [ 530.065055][T10595] do_syscall_64+0x35/0xb0 [ 530.070776][T10595] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 530.078599][T10595] RIP: 0033:0x7f63e7eb9ae9 [ 530.084726][T10595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 530.112031][T10595] RSP: 002b:00007f63e542f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 530.123079][T10595] RAX: ffffffffffffffda RBX: 00007f63e7fccf60 RCX: 00007f63e7eb9ae9 [ 530.134374][T10595] RDX: 0000000000000600 RSI: 0000000020003200 RDI: 0000000000000006 [ 530.143917][T10595] RBP: 00007f63e542f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 530.154311][T10595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.163336][T10595] R13: 00007ffcc536d52f R14: 00007f63e542f300 R15: 0000000000022000 [ 530.172126][T10595] 14:14:45 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) 14:14:45 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0x1e8, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x168, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd8, 0x5, "7cb027e8e138ed691a726c78df5f229d6272e4790ef566708266d1c523095559a5acf239c80b5e77b8ec67b52a7469ac6017423b3d54cc22f660bf7ba49f464cad5319b3c4575cb7e22c78740887ff0388888e454f33d4b6d13e7552bc7a4ddad02a8c5c26515419b9e2fc64909328154517b0f9077840f9f922fc4a4931dd108ef63baff4746486474360cd25e2cb42d8292b9a5c1ae033123c92d733e9be487ab068a6d29991e9c4eea874b58b7f8ee59ad75337463d8de231f57c9dc2ee3f195f6776d1610ffc325055cca1846b90f5aba024"}, @ETHTOOL_A_BITSET_MASK={0x7, 0x5, "7f1e7d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "120d6cf95f691b4278a049fe411717edf977e523e67df236c78f5cd67093e95d59e379e87eada0be75512fb213ddaab8d312ef90f5c258c8c2eb1bb69bc112daa3eb07be389a7f54d52ea613e413dfff169394cf04f6853260cf04faf7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff0918}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2441}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2b13}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x729d1108}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6, 0x5, "f46a"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}}, 0x8800) fcntl$setstatus(r1, 0x4, 0x46002) io_setup(0x1, &(0x7f0000000180)=0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r7, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x8, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:14:45 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000400", @ANYRES16, @ANYBLOB="010090c900000000000005000000080003"], 0x24}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105511, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYBLOB="46040000", @ANYRES32=r3, @ANYBLOB="ff830500000000000000", @ANYRESDEC], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100004000) [ 530.307292][ T7658] ================================================================== [ 530.318602][ T7658] BUG: KASAN: use-after-free in consume_skb+0x2e/0x160 [ 530.328907][ T7658] Read of size 4 at addr ffff88802266c79c by task kworker/3:4/7658 [ 530.343286][ T7658] [ 530.346765][ T7658] CPU: 3 PID: 7658 Comm: kworker/3:4 Not tainted 5.16.0-rc2-syzkaller #0 [ 530.357040][ T7658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 530.369808][ T7658] Workqueue: events bpf_map_free_deferred [ 530.377518][ T7658] Call Trace: [ 530.381834][ T7658] [ 530.385605][ T7658] dump_stack_lvl+0xcd/0x134 [ 530.391979][ T7658] print_address_description.constprop.0.cold+0x8d/0x2ed [ 530.404151][ T7658] ? consume_skb+0x2e/0x160 [ 530.410725][ T7658] ? consume_skb+0x2e/0x160 [ 530.416672][ T7658] kasan_report.cold+0x83/0xdf [ 530.422755][ T7658] ? consume_skb+0x2e/0x160 [ 530.429337][ T7658] kasan_check_range+0x13d/0x180 [ 530.435642][ T7658] consume_skb+0x2e/0x160 [ 530.441143][ T7658] __sk_msg_free+0x26d/0x360 [ 530.447036][ T7658] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 530.454226][ T7658] sk_psock_stop+0x415/0x620 [ 530.460214][ T7658] ? sk_error_report+0x310/0x310 [ 530.466405][ T7658] ? sk_error_report+0x310/0x310 [ 530.472820][ T7658] sk_psock_drop+0x150/0x3d0 [ 530.479080][ T7658] sock_hash_free+0x714/0x930 [ 530.485169][ T7658] ? sock_hash_release_progs+0xd0/0xd0 [ 530.492625][ T7658] process_one_work+0x9b2/0x1690 [ 530.500507][ T7658] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 530.507576][ T7658] ? rwlock_bug.part.0+0x90/0x90 [ 530.514510][ T7658] ? _raw_spin_lock_irq+0x41/0x50 [ 530.521625][ T7658] worker_thread+0x658/0x11f0 [ 530.528225][ T7658] ? process_one_work+0x1690/0x1690 [ 530.535192][ T7658] kthread+0x405/0x4f0 [ 530.540906][ T7658] ? set_kthread_struct+0x130/0x130 [ 530.547918][ T7658] ret_from_fork+0x1f/0x30 [ 530.553809][ T7658] [ 530.558078][ T7658] [ 530.561121][ T7658] Allocated by task 10595: [ 530.566745][ T7658] kasan_save_stack+0x1e/0x50 [ 530.572567][ T7658] __kasan_slab_alloc+0x85/0xb0 [ 530.578921][ T7658] kmem_cache_alloc+0x265/0x560 [ 530.585258][ T7658] skb_clone+0x170/0x3c0 [ 530.589962][ T7658] sk_psock_verdict_recv+0x72/0x780 [ 530.596451][ T7658] unix_read_sock+0xd7/0x250 [ 530.603667][ T7658] sk_psock_verdict_data_ready+0x11a/0x180 [ 530.611556][ T7658] unix_dgram_sendmsg+0xfa7/0x1950 [ 530.617782][ T7658] sock_sendmsg+0xcf/0x120 [ 530.624117][ T7658] ____sys_sendmsg+0x331/0x810 [ 530.630887][ T7658] ___sys_sendmsg+0xf3/0x170 [ 530.636952][ T7658] __sys_sendmmsg+0x195/0x470 [ 530.643979][ T7658] __x64_sys_sendmmsg+0x99/0x100 [ 530.650949][ T7658] do_syscall_64+0x35/0xb0 [ 530.656463][ T7658] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 530.663476][ T7658] [ 530.666380][ T7658] Freed by task 52: [ 530.671474][ T7658] kasan_save_stack+0x1e/0x50 [ 530.678264][ T7658] kasan_set_track+0x21/0x30 [ 530.683890][ T7658] kasan_set_free_info+0x20/0x30 [ 530.690174][ T7658] __kasan_slab_free+0xd1/0x110 [ 530.696656][ T7658] kmem_cache_free.part.0+0x91/0x200 [ 530.704315][ T7658] kfree_skbmem+0xef/0x1b0 [ 530.710053][ T7658] kfree_skb+0x140/0x3f0 [ 530.715485][ T7658] sk_psock_backlog+0x9de/0xea0 [ 530.721623][ T7658] process_one_work+0x9b2/0x1690 [ 530.728739][ T7658] worker_thread+0x658/0x11f0 [ 530.734383][ T7658] kthread+0x405/0x4f0 [ 530.739754][ T7658] ret_from_fork+0x1f/0x30 [ 530.744999][ T7658] [ 530.748182][ T7658] The buggy address belongs to the object at ffff88802266c6c0 [ 530.748182][ T7658] which belongs to the cache skbuff_head_cache of size 232 [ 530.766966][ T7658] The buggy address is located 220 bytes inside of [ 530.766966][ T7658] 232-byte region [ffff88802266c6c0, ffff88802266c7a8) [ 530.784156][ T7658] The buggy address belongs to the page: [ 530.792543][ T7658] page:ffffea0000899b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2266c [ 530.807239][ T7658] memcg:ffff8880697e2801 [ 530.813779][ T7658] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 530.824237][ T7658] raw: 00fff00000000200 ffffea000077f988 ffffea000095ed48 ffff8880402a4800 [ 530.835390][ T7658] raw: 0000000000000000 ffff88802266c080 000000010000000c ffff8880697e2801 [ 530.849601][ T7658] page dumped because: kasan: bad access detected [ 530.858772][ T7658] page_owner tracks the page as allocated [ 530.867609][ T7658] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x242220(__GFP_HIGH|__GFP_ATOMIC|__GFP_NOWARN|__GFP_COMP|__GFP_THISNODE), pid 8248, ts 418335292088, free_ts 413304572494 [ 530.898577][ T7658] get_page_from_freelist+0xa72/0x2f50 [ 530.906551][ T7658] __alloc_pages_slowpath.constprop.0+0x2eb/0x20d0 [ 530.916572][ T7658] __alloc_pages+0x412/0x500 [ 530.923011][ T7658] cache_grow_begin+0x75/0x470 [ 530.931903][ T7658] cache_alloc_refill+0x27f/0x380 [ 530.940465][ T7658] kmem_cache_alloc+0x450/0x560 [ 530.949586][ T7658] skb_clone+0x170/0x3c0 [ 530.956061][ T7658] sk_psock_verdict_recv+0x72/0x780 [ 530.966341][ T7658] unix_read_sock+0xd7/0x250 [ 530.972294][ T7658] sk_psock_verdict_data_ready+0x11a/0x180 [ 530.980291][ T7658] unix_dgram_sendmsg+0xfa7/0x1950 [ 530.987003][ T7658] sock_sendmsg+0xcf/0x120 [ 530.992271][ T7658] ____sys_sendmsg+0x331/0x810 [ 530.997063][ T7658] ___sys_sendmsg+0xf3/0x170 [ 531.001509][ T7658] __sys_sendmmsg+0x195/0x470 [ 531.006192][ T7658] __x64_sys_sendmmsg+0x99/0x100 [ 531.011649][ T7658] page last free stack trace: [ 531.016546][ T7658] free_pcp_prepare+0x374/0x870 [ 531.022773][ T7658] free_unref_page+0x19/0x690 [ 531.028530][ T7658] __put_page+0x13d/0x470 [ 531.033742][ T7658] migrate_pages+0x2737/0x3810 [ 531.039518][ T7658] compact_zone+0x1abb/0x3860 [ 531.044691][ T7658] proactive_compact_node+0x103/0x1c0 [ 531.051506][ T7658] kcompactd+0x5b4/0xf30 [ 531.058166][ T7658] kthread+0x405/0x4f0 [ 531.062715][ T7658] ret_from_fork+0x1f/0x30 [ 531.068871][ T7658] [ 531.071693][ T7658] Memory state around the buggy address: [ 531.078967][ T7658] ffff88802266c680: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 531.089370][ T7658] ffff88802266c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 531.100818][ T7658] >ffff88802266c780: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 531.117110][ T7658] ^ [ 531.126782][ T7658] ffff88802266c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 531.139763][ T7658] ffff88802266c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 531.149284][ T7658] ================================================================== [ 531.158872][ T7658] Disabling lock debugging due to kernel taint [ 531.167702][ T7658] Kernel panic - not syncing: panic_on_warn set ... [ 531.176825][ T7658] CPU: 3 PID: 7658 Comm: kworker/3:4 Tainted: G B 5.16.0-rc2-syzkaller #0 [ 531.191275][ T7658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 531.203172][ T7658] Workqueue: events bpf_map_free_deferred [ 531.210854][ T7658] Call Trace: [ 531.214439][ T7658] [ 531.218335][ T7658] dump_stack_lvl+0xcd/0x134 [ 531.225091][ T7658] panic+0x2b0/0x6dd [ 531.230555][ T7658] ? __warn_printk+0xf3/0xf3 [ 531.237557][ T7658] ? asm_common_interrupt+0x1e/0x40 [ 531.244672][ T7658] ? trace_hardirqs_on+0x38/0x1c0 [ 531.251577][ T7658] ? trace_hardirqs_on+0x51/0x1c0 [ 531.258383][ T7658] ? consume_skb+0x2e/0x160 [ 531.264130][ T7658] ? consume_skb+0x2e/0x160 [ 531.269714][ T7658] end_report.cold+0x63/0x6f [ 531.274863][ T7658] kasan_report.cold+0x71/0xdf [ 531.281103][ T7658] ? consume_skb+0x2e/0x160 [ 531.286879][ T7658] kasan_check_range+0x13d/0x180 [ 531.293823][ T7658] consume_skb+0x2e/0x160 [ 531.300061][ T7658] __sk_msg_free+0x26d/0x360 [ 531.305821][ T7658] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 531.312435][ T7658] sk_psock_stop+0x415/0x620 [ 531.318553][ T7658] ? sk_error_report+0x310/0x310 [ 531.324709][ T7658] ? sk_error_report+0x310/0x310 [ 531.331863][ T7658] sk_psock_drop+0x150/0x3d0 [ 531.338793][ T7658] sock_hash_free+0x714/0x930 [ 531.344933][ T7658] ? sock_hash_release_progs+0xd0/0xd0 [ 531.352269][ T7658] process_one_work+0x9b2/0x1690 [ 531.358741][ T7658] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 14:14:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000006910580000000000c60000000000000095000002000000004cd34b769e37605b320362ed39fe796e0af3889a5e4b243127d32b67fd1dde32079fbb4bb0975e5fe52d08ddb4872ca84a557ebe12b0f82bd86bc0067d5e946ef2d0ab16db70e6d2a683702aaaee6389565eca3cd96ab8d65b2b344ffbb62db8e57f87dcee041bee244bf020058c419b49e6287005f4c0d0a41b0fbf09b94e41083d532a5e04def2ae59f4a4fc74277c4b23"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x187}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000000c0)=@udp=r2}, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x803e0008, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x600, 0x0) (fail_nth: 6) [ 531.365694][ T7658] ? rwlock_bug.part.0+0x90/0x90 [ 531.373944][ T7658] ? _raw_spin_lock_irq+0x41/0x50 [ 531.379524][ T7658] worker_thread+0x658/0x11f0 [ 531.385674][ T7658] ? process_one_work+0x1690/0x1690 [ 531.393031][ T7658] kthread+0x405/0x4f0 [ 531.397803][ T7658] ? set_kthread_struct+0x130/0x130 [ 531.403903][ T7658] ret_from_fork+0x1f/0x30 [ 531.410275][ T7658] [ 531.416502][ T7658] Kernel Offset: disabled [ 531.422190][ T7658] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:14:45 Registers: info registers vcpu 0 RAX=00000000000007dd RBX=ffff888069edc2c0 RCX=1ffffffff1ff68f6 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffed100d3db858 RSP=ffffc90002aaef48 R8 =0000000000000001 R9 =ffffffff8ff75aa7 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8945ca29 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3183bfc700 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f318677d000 CR3=000000006c13a000 CR4=00152ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000042752ebf381bdbe8 XMM02=00000000000000005931608782dc365e XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff9200050dec4 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8bb81120 RBP=0000000000000000 RSP=ffffc9000286f5e8 R8 =0000000000000000 R9 =0000000000000000 R10=fffffbfff1b21daa R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=ffffffff8bb81120 R15=0000000000000000 RIP=ffffffff815b8100 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc7f3930004 CR3=00000000426f9000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc7f34ff7c000007fc7f34ff7c8 XMM02=00007fc7f34ff7e000007fc7f34ff7c0 XMM03=00007fc7f34ff7c800007fc7f34ff7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=7712c53e93b9f1e8728370bf3cb3486e XMM06=63e772d7f3a22482dabb339f3c035440 XMM07=bd0dad416e16bee646815929601aad29 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000276c7b RBX=ffff88801193e1c0 RCX=ffffffff894417bf RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000002 RSP=ffffc9000066fdf8 R8 =0000000000000001 R9 =ffff88802cc3aad3 R10=ffffed100598755a R11=0000000000000000 R12=ffffed1002327c38 R13=0000000000000002 R14=ffffffff8d90ed50 R15=0000000000000000 RIP=ffffffff8946e73b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc7f352c018 CR3=0000000019787000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=7712c53e93b9f1e8728370bf3cb3486e XMM06=63e772d7f3a22482dabb339f3c035440 XMM07=bd0dad416e16bee646815929601aad29 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8440c801 RDI=ffffffff907991e0 RBP=ffffffff907991a0 RSP=ffffc90002ebf690 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff8440c7f2 R11=000000000000001f R12=0000000000000000 R13=0000000000000063 R14=ffffffff907991a0 R15=dffffc0000000000 RIP=ffffffff8440c82a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b33926000 CR3=00000000426f9000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000